Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226731 5.8 警告 Timo Sirainen - Dovecot における SSL サーバを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4318 2013-03-8 19:27 2011-11-17 Show GitHub Exploit DB Packet Storm
226732 4.3 警告 Trimble - Trimble Infrastructure GNSS Series Receiver におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5053 2013-03-8 19:25 2013-03-7 Show GitHub Exploit DB Packet Storm
226733 5 警告 サイボウズ
日本電気
IBM
Apache Software Foundation
富士通
日立
- Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-4858 2013-03-8 15:39 2012-01-5 Show GitHub Exploit DB Packet Storm
226734 5.4 警告 IBM - WebSphere Cast Iron Cloud インテグレーションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-0465 2013-03-8 14:26 2013-02-12 Show GitHub Exploit DB Packet Storm
226735 6.8 警告 Google - Google Chrome で使用される libxslt におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2893 2013-03-8 14:19 2012-09-25 Show GitHub Exploit DB Packet Storm
226736 5 警告 サイバートラスト株式会社
Google
Mozilla Foundation
レッドハット
- Google Chrome などで利用される xsltGenerateIdFunction 関数における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-1202 2013-03-8 13:50 2011-03-8 Show GitHub Exploit DB Packet Storm
226737 6.8 警告 The GIMP Team - GIMP の GIF 画像形式用プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-3481 2013-03-8 13:47 2012-08-25 Show GitHub Exploit DB Packet Storm
226738 6.8 警告 The GIMP Team - GIMP の KiSS CEL ファイルフォーマットプラグインにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3403 2013-03-8 13:45 2012-08-25 Show GitHub Exploit DB Packet Storm
226739 4.3 警告 シスコシステムズ - Cisco Security Monitoring, Analysis and Response System における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-1140 2013-03-7 19:17 2013-03-4 Show GitHub Exploit DB Packet Storm
226740 3.5 注意 IBM - IBM TADDM の Data Management Portal Web User Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5942 2013-03-7 19:16 2013-03-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214401 9.8 CRITICAL
Network
inetsoftware i-net_clear_reports XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a we… CWE-611
XXE
CVE-2020-12684 2024-11-21 14:00 2020-07-16 Show GitHub Exploit DB Packet Storm
214402 4.6 MEDIUM
Physics
yubico libykpiv
piv_tool_manager
yubikey_smart_card_minidriver
An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. Thi… CWE-763
 Release of Invalid Pointer or Reference
CVE-2020-13132 2024-11-21 14:00 2020-07-10 Show GitHub Exploit DB Packet Storm
214403 4.3 MEDIUM
Physics
yubico libykpiv
piv_tool_manager
yubikey_smart_card_minidriver
An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. … CWE-125
Out-of-bounds Read
CVE-2020-13131 2024-11-21 14:00 2020-07-10 Show GitHub Exploit DB Packet Storm
214404 9.8 CRITICAL
Network
protocol gossipsub Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack. NVD-CWE-noinfo
CVE-2020-12821 2024-11-21 14:00 2020-07-8 Show GitHub Exploit DB Packet Storm
214405 7.2 HIGH
Network
code42 code42 Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local (non-SSO) user via a Code42-generated email, the… CWE-74
Injection
CVE-2020-12736 2024-11-21 14:00 2020-07-8 Show GitHub Exploit DB Packet Storm
214406 8.8 HIGH
Network
obdev little_snitch Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code execut… CWE-59
Link Following
CVE-2020-13095 2024-11-21 14:00 2020-07-1 Show GitHub Exploit DB Packet Storm
214407 7.3 HIGH
Local
boolebox boolebox BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-13247 2024-11-21 14:00 2020-06-25 Show GitHub Exploit DB Packet Storm
214408 5.4 MEDIUM
Network
boolebox boolebox BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx. CWE-79
Cross-site Scripting
CVE-2020-13248 2024-11-21 14:00 2020-06-25 Show GitHub Exploit DB Packet Storm
214409 5.7 MEDIUM
Adjacent
sane-project
canonical
opensuse
sane_backends
ubuntu_linux
leap
A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079. CWE-476
 NULL Pointer Dereference
CVE-2020-12866 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
214410 8.0 HIGH
Adjacent
sane-project
debian
canonical
opensuse
sane_backends
debian_linux
ubuntu_linux
leap
A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084. CWE-787
 Out-of-bounds Write
CVE-2020-12865 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm