Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 28, 2026, 4:09 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226461 | 5 | 警告 | MailUp | - | WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-0731 | 2013-03-25 16:41 | 2013-03-15 | Show | GitHub Exploit DB Packet Storm |
| 226462 | 5 | 警告 | Piwik | - | Piwik における重要な情報を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-2633 | 2013-03-25 16:35 | 2013-03-8 | Show | GitHub Exploit DB Packet Storm |
| 226463 | 4.3 | 警告 | Piwik | - | Piwik におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-1844 | 2013-03-25 16:34 | 2013-03-8 | Show | GitHub Exploit DB Packet Storm |
| 226464 | 7.2 | 危険 | Canonical | - | Ubuntu で使用される pam-xdg-support における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-1052 | 2013-03-25 16:21 | 2013-03-18 | Show | GitHub Exploit DB Packet Storm |
| 226465 | 4.3 | 警告 | Debian Canonical |
- | apt におけるパッケージを変更される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-1051 | 2013-03-25 16:20 | 2013-03-14 | Show | GitHub Exploit DB Packet Storm |
| 226466 | 6.8 | 警告 | - | Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-DesignError
|
CVE-2013-2632 | 2013-03-25 16:04 | 2013-03-18 | Show | GitHub Exploit DB Packet Storm | |
| 226467 | 6.9 | 警告 | XFree86 Project | - | XFree86 x11perf の x11perfcomp における権限を取得される脆弱性 |
CWE-Other
その他 |
CVE-2011-2504 | 2013-03-25 16:02 | 2011-07-27 | Show | GitHub Exploit DB Packet Storm |
| 226468 | 5.8 | 警告 | Apache Software Foundation | - | Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 | - | CVE-2012-5633 | 2013-03-25 16:00 | 2012-11-14 | Show | GitHub Exploit DB Packet Storm |
| 226469 | 7.5 | 危険 | tg0 | - | Ruby 用 Curl Gem における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2013-2617 | 2013-03-25 14:21 | 2013-03-12 | Show | GitHub Exploit DB Packet Storm |
| 226470 | 7.5 | 危険 | Hampton Catlin | - | Ruby 用 MiniMagick Gem における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2013-2616 | 2013-03-25 14:20 | 2013-03-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 28, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201991 | 9.8 |
CRITICAL
Network |
grandstream |
ucm6202_firmware ucm6204_firmware ucm6208_firmware |
The UCM6200 series 1.0.20.22 and below stores unencrypted user passwords in an SQLite database. This could allow an attacker to retrieve all passwords and possibly gain elevated privileges. |
CWE-312
Cleartext Storage of Sensitive Information |
CVE-2020-5723 | 2024-11-21 14:34 | 2020-03-31 | Show | GitHub Exploit DB Packet Storm |
| 201992 | 7.5 |
HIGH
Network |
mitsubishielectric |
cr800-q_firmware fx3g_firmware fx3gc_firmware fx3s_firmware fx3u_firmware fx3uc_firmware fx5u_firmware fx5uc_firmware fx5uj_firmware l02cpu_firmware l02cpu-p_firmware
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), an…
|
CWE-400
|
Uncontrolled Resource Consumption
CVE-2020-5527
|
2024-11-21 14:34 |
2020-03-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201993 | 8.8 |
HIGH
Adjacent |
toyota | display_control_unit | Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs … |
CWE-276
Incorrect Default Permissions |
CVE-2020-5551 | 2024-11-21 14:34 | 2020-03-30 | Show | GitHub Exploit DB Packet Storm |
| 201994 | 8.6 |
HIGH
Network |
f5 netapp |
nginx_controller cloud_backup |
In NGINX Controller versions prior to 3.2.0, an unauthenticated attacker with network access to the Controller API can create unprivileged user accounts. The user which is created is only able to upl… |
NVD-CWE-noinfo
|
CVE-2020-5863 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 201995 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.2, under certain conditions, TMM may crash or stop processing new traffic with the DPDK/ENA driver on AWS systems while sending traffic. … |
NVD-CWE-noinfo
|
CVE-2020-5862 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 201996 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP 15.1.0.1, specially formatted HTTP/3 messages may cause TMM to produce a core file. |
NVD-CWE-noinfo
|
CVE-2020-5859 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 201997 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP 12.1.0-12.1.5, the TMM process may produce a core file in some cases when Ram Cache incorrectly optimizes stored data resulting in memory errors. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-5861 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 201998 | 8.1 |
HIGH
Network |
f5 |
big-iq_centralized_management big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager… |
On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, in a High Availability (HA) network failover in Devic… |
CWE-287 CWE-319 Improper Authentication Cleartext Transmission of Sensitive Information |
CVE-2020-5860 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 201999 | 7.8 |
HIGH
Local |
f5 |
big-iq_centralized_management big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager… |
On BIG-IP 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, users with non-administrator roles (for example, Guest … |
NVD-CWE-noinfo
|
CVE-2020-5858 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 202000 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior may lead to a denial of service. |
NVD-CWE-noinfo
|
CVE-2020-5857 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |