Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226481 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0653 2013-02-13 16:45 2013-01-22 Show GitHub Exploit DB Packet Storm
226482 9.3 危険 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0654 2013-02-13 16:44 2013-01-22 Show GitHub Exploit DB Packet Storm
226483 6.8 警告 アクセラテクノロジ - Accela BizSearch におけるユーザになりすまされる脆弱性 CWE-noinfo
情報不足 		- 2013-02-13 15:44 2013-02-5 Show GitHub Exploit DB Packet Storm
226484 7.2 危険 VMware - 複数の VMware 製品の VMCI の実装における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1406 2013-02-13 15:42 2013-02-7 Show GitHub Exploit DB Packet Storm
226485 7.5 危険 CubeCart Limited - CubeCart における任意の PHP オブジェクトをアンシリアライズされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1465 2013-02-13 11:53 2013-01-31 Show GitHub Exploit DB Packet Storm
226486 - - ARM Ltd. (旧 Offspark) - ** 削除 ** PolarSSL の SSL モジュールにおける識別攻撃を誘発される脆弱性 - CVE-2013-1622 2013-02-13 11:49 2013-02-2 Show GitHub Exploit DB Packet Storm
226487 6.8 警告 Opera Software ASA - Opera における CSRF 保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-1639 2013-02-12 16:51 2013-01-30 Show GitHub Exploit DB Packet Storm
226488 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1638 2013-02-12 16:49 2013-01-30 Show GitHub Exploit DB Packet Storm
226489 9.3 危険 Opera Software ASA - Opera における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1637 2013-02-12 16:48 2013-01-30 Show GitHub Exploit DB Packet Storm
226490 9.3 危険 Ecava - IntegraXor SCADA Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4700 2013-02-12 14:26 2013-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201491 6.1 MEDIUM
Network 		ibm security_secret_server IBM Security Secret Server 10.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potent… CWE-79
Cross-site Scripting 		CVE-2020-4323 2024-11-21 14:32 2020-06-24 Show GitHub Exploit DB Packet Storm
201492 4.3 MEDIUM
Network 		ibm security_secret_server IBM Security Secret Server 10.7 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this v… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-4322 2024-11-21 14:32 2020-06-24 Show GitHub Exploit DB Packet Storm
201493 2.4 LOW
Physics 		django-basic-auth-ip-whitelist_project django-basic-auth-ip-whitelist In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASIC_AUTH_LOGIN and BASIC_AUTH_PASSWORD is set… - CVE-2020-4071 2024-11-21 14:32 2020-06-24 Show GitHub Exploit DB Packet Storm
201494 5.3 MEDIUM
Network 		ibm security_guardium IBM Security Guardium 10.6 and 11.1 may use insufficiently random numbers or values in a security context that depends on unpredictable numbers. IBM X-Force ID: 174807. CWE-330
 Use of Insufficiently Random Values 		CVE-2020-4188 2024-11-21 14:32 2020-06-24 Show GitHub Exploit DB Packet Storm
201495 5.3 MEDIUM
Network 		atlassian jira
jira_software_data_center 		Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers t… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-4028 2024-11-21 14:32 2020-06-23 Show GitHub Exploit DB Packet Storm
201496 6.5 MEDIUM
Network 		freerdp
fedoraproject
opensuse
canonical
debian 		freerdp
fedora
leap
ubuntu_linux
debian_linux 		In FreeRDP before version 2.1.2, there is an out of bounds read in RLEDECOMPRESS. All FreeRDP based clients with sessions with color depth < 32 are affected. This is fixed in version 2.1.2. - CVE-2020-4033 2024-11-21 14:32 2020-06-23 Show GitHub Exploit DB Packet Storm
201497 4.3 MEDIUM
Network 		freerdp
opensuse
fedoraproject
canonical
debian 		freerdp
leap
fedora
ubuntu_linux
debian_linux 		In FreeRDP before version 2.1.2, there is an integer casting vulnerability in update_recv_secondary_order. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1… - CVE-2020-4032 2024-11-21 14:32 2020-06-23 Show GitHub Exploit DB Packet Storm
201498 7.5 HIGH
Network 		freerdp
fedoraproject
opensuse
canonical
debian 		freerdp
fedora
leap
ubuntu_linux
debian_linux 		In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2. - CVE-2020-4031 2024-11-21 14:32 2020-06-23 Show GitHub Exploit DB Packet Storm
201499 6.5 MEDIUM
Network 		freerdp
fedoraproject
opensuse
canonical
debian 		freerdp
fedora
leap
ubuntu_linux
debian_linux 		In FreeRDP before version 2.1.2, there is an out of bounds read in TrioParse. Logging might bypass string length checks due to an integer overflow. This is fixed in version 2.1.2. - CVE-2020-4030 2024-11-21 14:32 2020-06-23 Show GitHub Exploit DB Packet Storm
201500 5.4 MEDIUM
Network 		w3c css_validator In CSS Validator less than or equal to commit 54d68a1, there is a cross-site scripting vulnerability in handling URIs. A user would have to click on a specifically crafted validator link to trigger i… - CVE-2020-4070 2024-11-21 14:32 2020-06-23 Show GitHub Exploit DB Packet Storm