Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226331 2.9 注意 Wireshark - Wireshark の IEEE 802.3 Slow Protocols 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1572 2013-04-9 15:15 2013-01-29 Show GitHub Exploit DB Packet Storm
226332 4.9 警告 Linux - Linux Kernel 用 Xen におけるサービス運用妨害 (ゲストクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0190 2013-04-8 17:56 2013-01-16 Show GitHub Exploit DB Packet Storm
226333 6.8 警告 アップル
Google		 - 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3971 2013-04-8 16:28 2012-02-8 Show GitHub Exploit DB Packet Storm
226334 7.5 危険 アップル
Google		 - 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3968 2013-04-8 16:26 2012-02-8 Show GitHub Exploit DB Packet Storm
226335 7.5 危険 アップル
Google		 - 複数の製品で使用される Webkit におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3105 2013-04-8 16:16 2012-05-23 Show GitHub Exploit DB Packet Storm
226336 5 警告 シスコシステムズ - Cisco Hosted Collaboration Solution におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1174 2013-04-8 14:28 2013-04-4 Show GitHub Exploit DB Packet Storm
226337 5 警告 IBM - IBM IMS Enterprise Suite の SOAP Gateway における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-0483 2013-04-8 14:28 2013-03-29 Show GitHub Exploit DB Packet Storm
226338 4 警告 IBM - IBM Netezza Performance Portal の HTTPD におけるディレクトリトラバーサルの脆弱性 CWE-16
環境設定 		CVE-2013-0470 2013-04-8 14:27 2013-03-22 Show GitHub Exploit DB Packet Storm
226339 2.1 注意 Katello Project - Katello の katello-configure における Candlepin CA 証明書を改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6116 2013-04-5 18:51 2013-03-1 Show GitHub Exploit DB Packet Storm
226340 4 警告 Opera Software ASA - Opera における識別攻撃およびプレーンテキストリカバリ攻撃を誘発される脆弱性 CWE-310
暗号の問題 		CVE-2013-1618 2013-04-5 17:23 2013-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209291 5.3 MEDIUM
Network 		mitel micloud_management_portal Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control. NVD-CWE-noinfo
CVE-2020-24595 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
209292 9.6 CRITICAL
Network 		mitel micloud_management_portal Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an … CWE-79
Cross-site Scripting 		CVE-2020-24594 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
209293 7.2 HIGH
Network 		mitel micloud_management_portal Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation. CWE-20
CWE-89
 Improper Input Validation 
SQL Injection 		CVE-2020-24593 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
209294 5.3 MEDIUM
Network 		mitel micloud_management_portal Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization. CWE-116
 Improper Encoding or Escaping of Output 		CVE-2020-24592 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
209295 9.8 CRITICAL
Network 		hpe utility_computing_service_meter Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9. CWE-22
Path Traversal 		CVE-2020-24626 2024-11-21 14:15 2020-09-23 Show GitHub Exploit DB Packet Storm
209296 7.5 HIGH
Network 		hpe utility_computing_service_meter Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9. CWE-22
Path Traversal 		CVE-2020-24625 2024-11-21 14:15 2020-09-23 Show GitHub Exploit DB Packet Storm
209297 7.5 HIGH
Network 		hpe utility_computing_service_meter Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9. CWE-22
Path Traversal 		CVE-2020-24624 2024-11-21 14:15 2020-09-23 Show GitHub Exploit DB Packet Storm
209298 5.9 MEDIUM
Network 		meltytech shotcut In mainwindow.cpp in Shotcut before 20.09.13, the upgrade check misuses TLS because of setPeerVerifyMode(QSslSocket::VerifyNone). A man-in-the-middle attacker could offer a spoofed download resource. CWE-295
Improper Certificate Validation  		CVE-2020-24619 2024-11-21 14:15 2020-09-22 Show GitHub Exploit DB Packet Storm
209299 6.5 MEDIUM
Adjacent 		hpe universal_api_framework A potential security vulnerability has been identified in Hewlett Packard Enterprise Universal API Framework. The vulnerability could be remotely exploited to allow SQL injection in HPE Universal API… CWE-89
SQL Injection 		CVE-2020-24623 2024-11-21 14:15 2020-09-19 Show GitHub Exploit DB Packet Storm
209300 9.8 CRITICAL
Network 		lemonldap-ng
debian 		lemonldap\
debian_linux 		An issue was discovered in LemonLDAP::NG through 2.0.8, when NGINX is used. An attacker may bypass URL-based access control to protected Virtual Hosts by submitting a non-normalized URI. This also af… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2020-24660 2024-11-21 14:15 2020-09-14 Show GitHub Exploit DB Packet Storm