Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226691	6.4	警告	アップル	-	Apple Mac OS X におけるディレクトリ認証要求を回避される脆弱性	CWE-noinfo 情報不足	CVE-2013-0966	2013-03-19 16:47	2013-03-15	Show	GitHub Exploit DB Packet Storm

226692	7.5	危険	マイクロソフト	-	Windows 8 の Microsoft Internet Explorer 10 におけるサンドボックス保護メカニズムを回避される脆弱性	CWE-noinfo 情報不足	CVE-2013-2552	2013-03-19 10:42	2013-03-11	Show	GitHub Exploit DB Packet Storm

226693	7.2	危険	マイクロソフト	-	Microsoft Windows 7 のカーネルにおける権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-2553	2013-03-19 10:41	2013-03-11	Show	GitHub Exploit DB Packet Storm

226694	7.5	危険	マイクロソフト	-	Microsoft Windows 7 における ASLR および DEP 保護メカニズムを回避される脆弱性	CWE-noinfo 情報不足	CVE-2013-2554	2013-03-19 10:37	2013-03-11	Show	GitHub Exploit DB Packet Storm

226695	7.5	危険	マイクロソフト	-	Microsoft Internet Explorer 9 のサンドボックス保護メカニズムにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-2557	2013-03-19 10:07	2013-03-11	Show	GitHub Exploit DB Packet Storm

226696	3.2	注意	ヒューレット・パッカード	-	HP Systems Insight Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-1995	2013-03-18 18:07	2012-04-30	Show	GitHub Exploit DB Packet Storm

226697	4.3	警告	ヒューレット・パッカード	-	HP Systems Insight Manager におけるデータを変更される脆弱性	CWE-noinfo 情報不足	CVE-2012-1996	2013-03-18 18:06	2012-04-30	Show	GitHub Exploit DB Packet Storm

226698	7.5	危険	ヒューレット・パッカード	-	HP Systems Insight Manager における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-1997	2013-03-18 18:05	2012-04-30	Show	GitHub Exploit DB Packet Storm

226699	7.5	危険	マイクロソフト	-	Microsoft SharePoint Server および SharePoint Foundation における読み取り制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0080	2013-03-18 17:59	2013-03-12	Show	GitHub Exploit DB Packet Storm

226700	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0083	2013-03-18 17:57	2013-03-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208981	7.5	HIGH Network	hyland	onbase	An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by the FileName parameter.	CWE-22 Path Traversal	CVE-2020-25247	2024-11-21 14:17	2020-09-11	Show	GitHub Exploit DB Packet Storm

208982	7.8	HIGH Local	linux	linux_kernel	The Linux kernel 4.9.x before 4.9.233, 4.14.x before 4.14.194, and 4.19.x before 4.19.140 has a use-after-free because skcd->no_refcnt was not considered during a backport of a CVE-2020-14356 patch. …	CWE-416 Use After Free	CVE-2020-25220	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208983	7.5	HIGH Network	libproxy_project debian fedoraproject opensuse canonical	libproxy debian_linux fedora leap ubuntu_linux	url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream that lacks a newline character. T…	CWE-674 Uncontrolled Recursion	CVE-2020-25219	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208984	7.3	HIGH Network	primekey	ejbca	An issue was discovered in PrimeKey EJBCA 6.x and 7.x before 7.4.1. When using a client certificate to enroll over the EST protocol, no revocation check is performed on that certificate. This vulnera…	CWE-295 Improper Certificate Validation	CVE-2020-25276	2024-11-21 14:17	2020-09-12	Show	GitHub Exploit DB Packet Storm

208985	7.8	HIGH Local	linux netapp	linux_kernel cloud_backup solidfire_\&_hci_management_node hci_compute_node solidfire_baseboard_management_controller solidfire\ _enterprise_sds_\&_hci_storage_node	get_gate_page in mm/gup.c in the Linux kernel 5.7.x and 5.8.x before 5.8.7 allows privilege escalation because of incorrect reference counting (caused by gate page mishandling) of the struct page tha…	CWE-672 Operation on a Resource after Expiration or Release	CVE-2020-25221	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208986	9.8	CRITICAL Network	webdesi9	file_manager	The File Manager (wp-file-manager) plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to hav…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-25213	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208987	7.0	HIGH Local	linux debian opensuse canonical	linux_kernel debian_linux leap ubuntu_linux	A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nf…	CWE-787 CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-25212	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208988	6.0	MEDIUM Local	linux debian fedoraproject	linux_kernel debian_linux fedora	In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctn…	CWE-120 Classic Buffer Overflow	CVE-2020-25211	2024-11-21 14:17	2020-09-10	Show	GitHub Exploit DB Packet Storm

208989	7.8	HIGH Local	gnupg gpg4win	gnupg gpg4win	GnuPG 2.2.21 and 2.2.22 (and Gpg4win 3.1.12) has an array overflow, leading to a crash or possibly unspecified other impact, when a victim imports an attacker's OpenPGP key, and this key has AEAD pre…	CWE-120 Classic Buffer Overflow	CVE-2020-25125	2024-11-21 14:17	2020-09-4	Show	GitHub Exploit DB Packet Storm

208990	4.8	MEDIUM Network	vbulletin	vbulletin	The Admin CP in vBulletin 5.6.3 allows XSS via an admincp/attachment.php&do=rebuild&type= URI.	CWE-79 Cross-site Scripting	CVE-2020-25124	2024-11-21 14:17	2020-09-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed