Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226501	1.5	注意	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0525	2013-03-28 15:17	2013-03-21	Show	GitHub Exploit DB Packet Storm

226502	4.3	警告	IBM	-	IBM iNotes におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5943	2013-03-28 14:27	2013-03-21	Show	GitHub Exploit DB Packet Storm

226503	5	警告	IBM	-	Lotus Domino におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0486	2013-03-28 12:00	2013-03-28	Show	GitHub Exploit DB Packet Storm

226504	5	警告	アップルサン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3558	2013-03-27 17:37	2011-10-18	Show	GitHub Exploit DB Packet Storm

226505	4.3	警告	ヒューレット・パッカードアドビシステムズ日立	-	Adobe Flex SDK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2461	2013-03-27 17:33	2011-11-30	Show	GitHub Exploit DB Packet Storm

226506	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2460	2013-03-27 17:32	2011-11-10	Show	GitHub Exploit DB Packet Storm

226507	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-2459	2013-03-27 17:31	2011-11-10	Show	GitHub Exploit DB Packet Storm

226508	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるクロスドメインポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2458	2013-03-27 17:29	2011-11-10	Show	GitHub Exploit DB Packet Storm

226509	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2457	2013-03-27 17:27	2011-11-10	Show	GitHub Exploit DB Packet Storm

226510	10	危険	ヒューレット・パッカードアドビシステムズオラクル	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-noinfo 情報不足	CVE-2011-2456	2013-03-27 17:26	2011-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209181	5.5	MEDIUM Local	imagemagick	imagemagick	TIFFGetProfiles() in /coders/tiff.c calls strstr() which causes a large out-of-bounds read when it searches for `"dc:format=\"image/dng\"` within `profile` due to improper string handling, when a cra…	-	CVE-2020-25667	2024-11-21 14:18	2020-12-9	Show	GitHub Exploit DB Packet Storm

209182	3.3	LOW Local	imagemagick debian	imagemagick debian_linux	There are 4 places in HistogramCompare() in MagickCore/histogram.c where an integer overflow is possible during simple math calculations. This occurs in the rgb values and `count` value for a color. …	-	CVE-2020-25666	2024-11-21 14:18	2020-12-9	Show	GitHub Exploit DB Packet Storm

209183	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	The PALM image coder at coders/palm.c makes an improper call to AcquireQuantumMemory() in routine WritePALMImage() because it needs to be offset by 256. This can cause a out-of-bounds read later on i…	CWE-125 Out-of-bounds Read	CVE-2020-25665	2024-11-21 14:18	2020-12-9	Show	GitHub Exploit DB Packet Storm

209184	6.1	MEDIUM Local	imagemagick fedoraproject	imagemagick fedora	In WriteOnePNGImage() of the PNG coder at coders/png.c, an improper call to AcquireVirtualMemory() and memset() allows for an out-of-bounds write later when PopShortPixel() from MagickCore/quantum-pr…	-	CVE-2020-25664	2024-11-21 14:18	2020-12-9	Show	GitHub Exploit DB Packet Storm

209185	5.5	MEDIUM Local	imagemagick	imagemagick	A call to ConformPixelInfo() in the SetImageAlphaChannel() routine of /MagickCore/channel.c caused a subsequent heap-use-after-free or heap-buffer-overflow READ when GetPixelRed() or GetPixelBlue() w…	-	CVE-2020-25663	2024-11-21 14:18	2020-12-9	Show	GitHub Exploit DB Packet Storm

209186	9.8	CRITICAL Network	online_bus_booking_system_project	online_bus_booking_system	Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can …	CWE-89 SQL Injection	CVE-2020-25889	2024-11-21 14:18	2020-12-8	Show	GitHub Exploit DB Packet Storm

209187	7.5	HIGH Network	openldap redhat netapp	openldap enterprise_linux cloud_backup solidfire_baseboard_management_controller_firmware	A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticated attacker could remotely crash the slapd process by sen…	-	CVE-2020-25692	2024-11-21 14:18	2020-12-8	Show	GitHub Exploit DB Packet Storm

209188	5.5	MEDIUM Local	ceph redhat	ceph-ansible ceph_storage	A flaw was found in Ceph-ansible v4.0.41 where it creates an /etc/ceph/iscsi-gateway.conf with insecure default permissions. This flaw allows any user on the system to read sensitive information with…	-	CVE-2020-25677	2024-11-21 14:18	2020-12-8	Show	GitHub Exploit DB Packet Storm

209189	6.1	MEDIUM Network	moodle	moodle	A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title, which was not escaped on the "Add new chapter" p…	-	CVE-2020-25631	2024-11-21 14:18	2020-12-8	Show	GitHub Exploit DB Packet Storm

209190	7.5	HIGH Network	moodle	moodle	A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, which could lead to a denial of service risk. This aff…	-	CVE-2020-25630	2024-11-21 14:18	2020-12-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed