Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226371	7.5	危険	レッドハット	-	JBoss EAP および EWP における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5629	2013-03-18 14:14	2013-02-4	Show	GitHub Exploit DB Packet Storm

226372	7.2	危険	マイクロソフト	-	Microsoft Windows の USB カーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1285	2013-03-18 11:46	2013-03-12	Show	GitHub Exploit DB Packet Storm

226373	7.2	危険	マイクロソフト	-	Microsoft Windows の USB カーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1286	2013-03-18 11:44	2013-03-12	Show	GitHub Exploit DB Packet Storm

226374	7.2	危険	マイクロソフト	-	Microsoft Windows の USB カーネルモードドライバにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1287	2013-03-18 11:42	2013-03-12	Show	GitHub Exploit DB Packet Storm

226375	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-1288	2013-03-18 11:39	2013-03-12	Show	GitHub Exploit DB Packet Storm

226376	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカード	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0815	2013-03-14 17:54	2011-06-7	Show	GitHub Exploit DB Packet Storm

226377	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4470	2013-03-14 16:56	2011-02-15	Show	GitHub Exploit DB Packet Storm

226378	9.3	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player の ExternalInterface ActionScript 機能における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-0648	2013-03-14 16:21	2013-02-26	Show	GitHub Exploit DB Packet Storm

226379	9.3	危険	アドビシステムズ	-	Adobe Flash Player の Firefox 版サンドボックスにおける任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0643	2013-03-14 16:18	2013-02-26	Show	GitHub Exploit DB Packet Storm

226380	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0630	2013-03-14 16:14	2013-01-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209561	5.4	MEDIUM Network	bigtreecms	bigtree_cms	Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP …	CWE-79 Cross-site Scripting	CVE-2020-18467	2024-11-21 14:08	2021-08-27	Show	GitHub Exploit DB Packet Storm

209562	5.4	MEDIUM Network	popojicms	popojicms	Cross Site Scripting (XSS) vulnerability exists in PopojiCMS 2.0.1 in admin.php?mod=menumanager--------- edit menu.	CWE-79 Cross-site Scripting	CVE-2020-18065	2024-11-21 14:08	2021-08-26	Show	GitHub Exploit DB Packet Storm

209563	5.5	MEDIUM Local	broadcom	tcpreplay	Buffer Overflow in Tcpreplay v4.3.2 allows attackers to cause a Denial of Service via the 'do_checksum' function in 'checksum.c'. It can be triggered by sending a crafted pcap file to the 'tcpreplay-…	CWE-120 Classic Buffer Overflow	CVE-2020-18976	2024-11-21 14:08	2021-08-26	Show	GitHub Exploit DB Packet Storm

209564	3.3	LOW Local	nasm	netwide_assembler	Buffer Overflow in Netwide Assembler (NASM) v2.15.xx allows attackers to cause a denial of service via 'crc64i' in the component 'nasmlib/crc64'. This issue is different than CVE-2019-7147.	CWE-120 Classic Buffer Overflow	CVE-2020-18974	2024-11-21 14:08	2021-08-26	Show	GitHub Exploit DB Packet Storm

209565	5.5	MEDIUM Local	podofo_project	podofo	Exposure of Sensitive Information to an Unauthorized Actor in PoDoFo v0.9.6 allows attackers to obtain sensitive information via 'IsNextToken' in the component 'src/base/PdfToenizer.cpp'.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18972	2024-11-21 14:08	2021-08-26	Show	GitHub Exploit DB Packet Storm

209566	5.5	MEDIUM Local	podofo_project	podofo	Stack-based Buffer Overflow in PoDoFo v0.9.6 allows attackers to cause a denial of service via the component 'src/base/PdfDictionary.cpp:65'.	CWE-787 Out-of-bounds Write	CVE-2020-18971	2024-11-21 14:08	2021-08-26	Show	GitHub Exploit DB Packet Storm

209567	8.8	HIGH Network	dedecms	dedecms	The plus/search.php component in DedeCMS 5.7 SP2 allows remote attackers to execute arbitrary PHP code via the typename parameter because the contents of typename.inc are under an attacker's control.	CWE-352 Origin Validation Error	CVE-2020-18917	2024-11-21 14:08	2021-08-25	Show	GitHub Exploit DB Packet Storm

209568	7.5	HIGH Network	ecisp	espcms-p8	EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. This vulnerability allows attackers to access sensitive…	CWE-89 SQL Injection	CVE-2020-18913	2024-11-21 14:08	2021-08-25	Show	GitHub Exploit DB Packet Storm

209569	6.5	MEDIUM Network	libav	libav	In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2020-18778	2024-11-21 14:08	2021-08-24	Show	GitHub Exploit DB Packet Storm

209570	6.5	MEDIUM Network	libav	libav	In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file.	CWE-125 Out-of-bounds Read	CVE-2020-18776	2024-11-21 14:08	2021-08-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed