Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226701 5.4 警告 シスコシステムズ - Cisco Adaptive Security Appliances におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2012-5415 2013-04-17 19:23 2013-04-16 Show GitHub Exploit DB Packet Storm
226702 6.8 警告 bestwebsharing - Groovy Media Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2760 2013-04-17 14:41 2013-04-16 Show GitHub Exploit DB Packet Storm
226703 4.3 警告 IBM - IBM XIV Storage System Gen3 におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2012-4829 2013-04-17 14:40 2013-04-10 Show GitHub Exploit DB Packet Storm
226704 4.9 警告 マイクロソフト - 複数の Microsoft Windows 製品のカーネルにおける権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1294 2013-04-16 17:24 2013-04-9 Show GitHub Exploit DB Packet Storm
226705 4.3 警告 マイクロソフト - 複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1289 2013-04-16 17:04 2013-04-9 Show GitHub Exploit DB Packet Storm
226706 7.2 危険 マイクロソフト - Microsoft Windows Defender における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2013-0078 2013-04-16 17:02 2013-04-9 Show GitHub Exploit DB Packet Storm
226707 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の CSRSS における権限昇格の脆弱性 CWE-119
バッファエラー
CVE-2013-1295 2013-04-16 17:00 2013-04-9 Show GitHub Exploit DB Packet Storm
226708 5 警告 マイクロソフト - 複数の Microsoft Active Directory のコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1282 2013-04-16 16:57 2013-04-9 Show GitHub Exploit DB Packet Storm
226709 6.2 警告 Motorola Solutions, Inc
クアルコム
- Qualcomm MSM8960 を使用する複数の Motorola 製 Android の TrustZone カーネルにおけるブートローダのロックを解除される脆弱性 CWE-16
環境設定
CVE-2013-3051 2013-04-16 16:55 2013-04-13 Show GitHub Exploit DB Packet Storm
226710 4.9 警告 マイクロソフト - 複数の Microsoft Windows 製品のカーネルにおける権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1284 2013-04-16 16:53 2013-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202591 4.3 MEDIUM
Network
prototypejs prototype Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field. CWE-862
 Missing Authorization
CVE-2020-7993 2024-11-21 14:38 2020-02-4 Show GitHub Exploit DB Packet Storm
202592 9.8 CRITICAL
Network
norman malware_cleaner nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled. CWE-787
 Out-of-bounds Write
CVE-2020-8508 2024-11-21 14:38 2020-02-3 Show GitHub Exploit DB Packet Storm
202593 6.1 MEDIUM
Network
maxum rumpus An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functiona… CWE-79
Cross-site Scripting
CVE-2020-8514 2024-11-21 14:38 2020-02-3 Show GitHub Exploit DB Packet Storm
202594 5.3 MEDIUM
Network
torproject tor The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to di… NVD-CWE-noinfo
CVE-2020-8516 2024-11-21 14:38 2020-02-2 Show GitHub Exploit DB Packet Storm
202595 9.8 CRITICAL
Network
draytek vigor2960_firmware
vigor300b_firmware
vigor3900_firmware
DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacter… CWE-78
OS Command 
CVE-2020-8515 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
202596 6.1 MEDIUM
Network
icewarp icewarp_server In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter. CWE-79
Cross-site Scripting
CVE-2020-8512 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
202597 6.5 MEDIUM
Network
arox school_management_software_php\/mysql School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user. CWE-352
 Origin Validation Error
CVE-2020-8505 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
202598 6.5 MEDIUM
Network
arox school_management_software_php\/mysql School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user. CWE-352
 Origin Validation Error
CVE-2020-8504 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
202599 6.5 MEDIUM
Network
biscom secure_file_transfer Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-uploa… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2020-8503 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
202600 4.3 MEDIUM
Network
zohocorp manageengine_remote_access_plus An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined c… NVD-CWE-noinfo
CVE-2020-8422 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm