Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226351	3.5	注意	IBM	-	複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0457	2013-02-21 18:36	2013-02-15	Show	GitHub Exploit DB Packet Storm

226352	6.5	警告	IBM	-	複数の IBM 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6357	2013-02-21 18:36	2013-02-15	Show	GitHub Exploit DB Packet Storm

226353	6.5	警告	IBM	-	複数の IBM 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6356	2013-02-21 18:35	2013-02-15	Show	GitHub Exploit DB Packet Storm

226354	6.5	警告	IBM	-	複数の IBM 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6355	2013-02-21 18:34	2013-02-15	Show	GitHub Exploit DB Packet Storm

226355	4.3	警告	IBM	-	IBM WebSphere Message Broker におけるサービス運用妨害 (無限ループ) の脆弱性	CWE-119 バッファエラー	CVE-2012-5953	2013-02-21 18:34	2013-02-12	Show	GitHub Exploit DB Packet Storm

226356	5	警告	IBM	-	IBM WebSphere Message Broker における認証されていないメッセージの送信を誘発される脆弱性	CWE-287 不適切な認証	CVE-2012-5952	2013-02-21 18:33	2013-02-12	Show	GitHub Exploit DB Packet Storm

226357	3.5	注意	IBM	-	IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5941	2013-02-21 18:29	2013-02-20	Show	GitHub Exploit DB Packet Storm

226358	4.3	警告	IBM	-	IBM Netezza の WebAdmin アプリケーションにおける認証情報を発見される脆弱性	CWE-287 不適切な認証	CVE-2012-5940	2013-02-21 18:28	2013-02-20	Show	GitHub Exploit DB Packet Storm

226359	6.8	警告	IBM	-	IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5763	2013-02-21 18:26	2012-02-20	Show	GitHub Exploit DB Packet Storm

226360	3.5	注意	IBM	-	IBM Netezza の WebAdmin アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5762	2013-02-21 18:25	2012-02-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201201	8.8	HIGH Network	peerigon	angular-expressions	Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input. I…	CWE-74 Injection	CVE-2020-5219	2024-11-21 14:33	2020-01-25	Show	GitHub Exploit DB Packet Storm

201202	5.8	MEDIUM Network	twitter	secure_headers	In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/override_content_s…	CWE-74 Injection	CVE-2020-5217	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

201203	5.8	MEDIUM Network	twitter	secure_headers	In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_s…	CWE-74 Injection	CVE-2020-5216	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

201204	4.4	MEDIUM Network	privatebin	privatebin	In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a per…	CWE-79 Cross-site Scripting	CVE-2020-5223	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

201205	7.2	HIGH Network	troglobit	uftpd	In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesys…	CWE-22 Path Traversal	CVE-2020-5221	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

201206	5.5	MEDIUM Local	apt-cacher-ng_project debian opensuse	apt-cacher-ng debian_linux leap backports	apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via …	NVD-CWE-noinfo	CVE-2020-5202	2024-11-21 14:33	2020-01-22	Show	GitHub Exploit DB Packet Storm

201207	6.1	MEDIUM Network	phpgurukul	hospital_management_system	PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter.	CWE-79 Cross-site Scripting	CVE-2020-5193	2024-11-21 14:33	2020-01-15	Show	GitHub Exploit DB Packet Storm

201208	8.1	HIGH Network	cerberusftp	ftp_server	Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permis…	CWE-276 Incorrect Default Permissions	CVE-2020-5196	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

201209	5.4	MEDIUM Network	cerberusftp	ftp_server	The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endpoint. Improper permission verification o…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-5194	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

201210	4.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1. It has Incorrect Access Control.	CWE-200 Information Exposure	CVE-2020-5197	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm