Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226731 5.8 警告 Timo Sirainen - Dovecot における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4318 2013-03-8 19:27 2011-11-17 Show GitHub Exploit DB Packet Storm
226732 4.3 警告 Trimble - Trimble Infrastructure GNSS Series Receiver におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5053 2013-03-8 19:25 2013-03-7 Show GitHub Exploit DB Packet Storm
226733 5 警告 サイボウズ
日本電気
IBM
Apache Software Foundation
富士通
日立
- Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-4858 2013-03-8 15:39 2012-01-5 Show GitHub Exploit DB Packet Storm
226734 5.4 警告 IBM - WebSphere Cast Iron Cloud インテグレーションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-0465 2013-03-8 14:26 2013-02-12 Show GitHub Exploit DB Packet Storm
226735 6.8 警告 Google - Google Chrome で使用される libxslt におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2893 2013-03-8 14:19 2012-09-25 Show GitHub Exploit DB Packet Storm
226736 5 警告 サイバートラスト株式会社
Google
Mozilla Foundation
レッドハット
- Google Chrome などで利用される xsltGenerateIdFunction 関数における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-1202 2013-03-8 13:50 2011-03-8 Show GitHub Exploit DB Packet Storm
226737 6.8 警告 The GIMP Team - GIMP の GIF 画像形式用プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-3481 2013-03-8 13:47 2012-08-25 Show GitHub Exploit DB Packet Storm
226738 6.8 警告 The GIMP Team - GIMP の KiSS CEL ファイルフォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3403 2013-03-8 13:45 2012-08-25 Show GitHub Exploit DB Packet Storm
226739 4.3 警告 シスコシステムズ - Cisco Security Monitoring, Analysis and Response System における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-1140 2013-03-7 19:17 2013-03-4 Show GitHub Exploit DB Packet Storm
226740 3.5 注意 IBM - IBM TADDM の Data Management Portal Web User Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5942 2013-03-7 19:16 2013-03-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209031 9.6 CRITICAL
Network
free freebox_revolution_firmware
freebox_mini_firmware
freebox_one_firmware
freebox_delta_firmware
freebox_pop_firmware
A DNS rebinding vulnerability in the UPnP IGD implementations in Freebox v5 before 1.5.29 and Freebox Server before 4.2.3. CWE-20
 Improper Input Validation 
CVE-2020-24376 2024-11-21 14:14 2020-09-17 Show GitHub Exploit DB Packet Storm
209032 9.6 CRITICAL
Network
free freebox_hd_firmware A DNS rebinding vulnerability in Freebox v5 before 1.5.29. CWE-20
 Improper Input Validation 
CVE-2020-24374 2024-11-21 14:14 2020-09-17 Show GitHub Exploit DB Packet Storm
209033 8.8 HIGH
Network
free freebox_revolution_firmware
freebox_mini_firmware
freebox_one_firmware
freebox_delta_firmware
freebox_pop_firmware
A CSRF vulnerability in the UPnP MediaServer implementation in Freebox Server before 4.2.3. CWE-352
 Origin Validation Error
CVE-2020-24373 2024-11-21 14:14 2020-09-17 Show GitHub Exploit DB Packet Storm
209034 9.8 CRITICAL
Network
projectworlds house_rental Projectworlds House Rental v1.0 suffers from an unauthenticated SQL Injection vulnerability, allowing remote attackers to execute arbitrary code on the hosting webserver via a malicious index.php POS… CWE-89
SQL Injection
CVE-2020-23833 2024-11-21 14:14 2020-09-16 Show GitHub Exploit DB Packet Storm
209035 9.8 CRITICAL
Network
online_course_registration_project online_course_registration A File Upload vulnerability in SourceCodester Online Course Registration v1.0 allows remote attackers to achieve Remote Code Execution (RCE) on the hosting webserver by uploading a crafted PHP web-sh… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-23828 2024-11-21 14:14 2020-09-16 Show GitHub Exploit DB Packet Storm
209036 9.1 CRITICAL
Network
trendmicro serverprotect A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileg… CWE-77
Command Injection
CVE-2020-24561 2024-11-21 14:14 2020-09-16 Show GitHub Exploit DB Packet Storm
209037 7.6 HIGH
Physics
intel core_i7-8665ue_firmware
core_i7-8665u_firmware
core_i7-8557u_firmware
core_i7-8850h_firmware
core_i7-8809g_firmware
core_i7-8750h_firmware
core_i7-8709g_firmware
core_i7-8706g_fi…
Logic error in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or in… NVD-CWE-noinfo
CVE-2020-24457 2024-11-21 14:14 2020-09-15 Show GitHub Exploit DB Packet Storm
209038 8.8 HIGH
Network
argosoft mail_server ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Request Forgery (CSRF) for perform remote arbitrary code execution. The component is the Administration dashboard. When using admin/user creden… CWE-352
 Origin Validation Error
CVE-2020-23824 2024-11-21 14:14 2020-09-12 Show GitHub Exploit DB Packet Storm
209039 7.8 HIGH
Local
taoensso nippy A deserialization flaw is present in Taoensso Nippy before 2.14.2. In some circumstances, it is possible for an attacker to create a malicious payload that, when deserialized, will allow arbitrary co… CWE-502
 Deserialization of Untrusted Data
CVE-2020-24164 2024-11-21 14:14 2020-09-11 Show GitHub Exploit DB Packet Storm
209040 7.2 HIGH
Network
atoptechnology se5901_firmware
se5901b_firmware
se5904d_firmware
se5908_firmware
se5908a_firmware
se5916_firmware
se5916a_firmware
Atop Technology industrial 3G/4G gateway contains Command Injection vulnerability. Due to insufficient input validation, the device's web management interface allows attackers to inject specific code… CWE-78
OS Command 
CVE-2020-24552 2024-11-21 14:14 2020-09-10 Show GitHub Exploit DB Packet Storm