Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226731	5.8	警告	Timo Sirainen	-	Dovecot における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4318	2013-03-8 19:27	2011-11-17	Show	GitHub Exploit DB Packet Storm

226732	4.3	警告	Trimble	-	Trimble Infrastructure GNSS Series Receiver におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5053	2013-03-8 19:25	2013-03-7	Show	GitHub Exploit DB Packet Storm

226733	5	警告	サイボウズ日本電気 IBM Apache Software Foundation 富士通日立	-	Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4858	2013-03-8 15:39	2012-01-5	Show	GitHub Exploit DB Packet Storm

226734	5.4	警告	IBM	-	WebSphere Cast Iron Cloud インテグレーションにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-0465	2013-03-8 14:26	2013-02-12	Show	GitHub Exploit DB Packet Storm

226735	6.8	警告	Google	-	Google Chrome で使用される libxslt におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2893	2013-03-8 14:19	2012-09-25	Show	GitHub Exploit DB Packet Storm

226736	5	警告	サイバートラスト株式会社 Google Mozilla Foundation レッドハット	-	Google Chrome などで利用される xsltGenerateIdFunction 関数における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-1202	2013-03-8 13:50	2011-03-8	Show	GitHub Exploit DB Packet Storm

226737	6.8	警告	The GIMP Team	-	GIMP の GIF 画像形式用プラグインにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-3481	2013-03-8 13:47	2012-08-25	Show	GitHub Exploit DB Packet Storm

226738	6.8	警告	The GIMP Team	-	GIMP の KiSS CEL ファイルフォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3403	2013-03-8 13:45	2012-08-25	Show	GitHub Exploit DB Packet Storm

226739	4.3	警告	シスコシステムズ	-	Cisco Security Monitoring, Analysis and Response System における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-1140	2013-03-7 19:17	2013-03-4	Show	GitHub Exploit DB Packet Storm

226740	3.5	注意	IBM	-	IBM TADDM の Data Management Portal Web User Interface におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5942	2013-03-7 19:16	2013-03-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209021	7.8	HIGH Local	trendmicro	apex_one	A vulnerability in Trend Micro Apex One may allow a local attacker to manipulate the process of the security agent unload option (if configured), which then could be manipulated to gain a privilege e…	CWE-287 Improper Authentication	CVE-2020-24563	2024-11-21 14:14	2020-09-29	Show	GitHub Exploit DB Packet Storm

209022	7.8	HIGH Local	trendmicro	officescan	A vulnerability in Trend Micro OfficeScan XG SP1 on Microsoft Windows may allow an attacker to create a hard link to any file on the system, which then could be manipulated to gain a privilege escala…	CWE-59 Link Following	CVE-2020-24562	2024-11-21 14:14	2020-09-29	Show	GitHub Exploit DB Packet Storm

209023	8.8	HIGH Network	multi_user_project	multi_user	A Cross-Site Request Forgery (CSRF) vulnerability in the Multi User plugin 1.8.2 for GetSimple CMS allows remote attackers to add admin (or other) users after an authenticated admin visits a third-pa…	CWE-352 Origin Validation Error	CVE-2020-23837	2024-11-21 14:14	2020-09-25	Show	GitHub Exploit DB Packet Storm

209024	8.8	HIGH Network	gemteks	wrtm-127acn_firmware wrtm-127x9_firmware	An issue was discovered on Gemtek WRTM-127ACN 01.01.02.141 and WRTM-127x9 01.01.02.127 devices. The Monitor Diagnostic network page allows an authenticated attacker to execute a command directly on t…	CWE-78 CWE-1188 OS Command Insecure Default Initialization of Resource	CVE-2020-24365	2024-11-21 14:14	2020-09-25	Show	GitHub Exploit DB Packet Storm

209025	7.5	HIGH Network	trendmicro	antivirus\+_2019 internet_security_2019 maximum_security_2019 officescan_cloud premium_security_2019	An incomplete SSL server certification validation vulnerability in the Trend Micro Security 2019 (v15) consumer family of products could allow an attacker to combine this vulnerability with another a…	CWE-295 Improper Certificate Validation	CVE-2020-24560	2024-11-21 14:14	2020-09-24	Show	GitHub Exploit DB Packet Storm

209026	7.5	HIGH Network	ygopro	ygocore	An integer overflow was discovered in YGOPro ygocore v13.51. Attackers can use it to leak the game server thread's memory.	CWE-190 Integer Overflow or Wraparound	CVE-2020-24213	2024-11-21 14:14	2020-09-24	Show	GitHub Exploit DB Packet Storm

209027	6.5	MEDIUM Network	arista	cloudvision_portal	A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for acces…	NVD-CWE-noinfo	CVE-2020-24333	2024-11-21 14:14	2020-09-23	Show	GitHub Exploit DB Packet Storm

209028	7.2	HIGH Network	titanhq	spamtitan	A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This re…	CWE-269 Improper Privilege Management	CVE-2020-24046	2024-11-21 14:14	2020-09-18	Show	GitHub Exploit DB Packet Storm

209029	7.2	HIGH Network	titanhq	spamtitan	A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The res…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-24045	2024-11-21 14:14	2020-09-18	Show	GitHub Exploit DB Packet Storm

209030	9.6	CRITICAL Network	free	freebox_revolution_firmware freebox_mini_firmware freebox_one_firmware freebox_delta_firmware freebox_pop_firmware	A DNS rebinding vulnerability in the Freebox OS web interface in Freebox Server before 4.2.3.	CWE-20 Improper Input Validation	CVE-2020-24377	2024-11-21 14:14	2020-09-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed