Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226821 5.8 警告 シマンテック - Symantec Web Gateway アプライアンスの管理コンソールにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4673 2013-08-2 17:58 2013-07-25 Show GitHub Exploit DB Packet Storm
226822 7.2 危険 シマンテック - Symantec Web Gateway アプライアンスの管理コンソールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4672 2013-08-2 17:57 2013-07-25 Show GitHub Exploit DB Packet Storm
226823 6 警告 シマンテック - Symantec Web Gateway アプライアンスの管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-4671 2013-08-2 17:57 2013-07-25 Show GitHub Exploit DB Packet Storm
226824 4.3 警告 シマンテック - Symantec Web Gateway アプライアンスの管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4670 2013-08-2 17:56 2013-07-25 Show GitHub Exploit DB Packet Storm
226825 7.4 危険 シマンテック - Symantec Web Gateway アプライアンスの管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-1617 2013-08-2 17:55 2013-07-25 Show GitHub Exploit DB Packet Storm
226826 8.3 危険 シマンテック - Symantec Web Gateway アプライアンスの管理コンソールにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2013-1616 2013-08-2 17:55 2013-07-25 Show GitHub Exploit DB Packet Storm
226827 6.4 警告 IBM - IBM WebSphere Commerce における REST リクエストを発行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2994 2013-08-2 17:54 2013-07-26 Show GitHub Exploit DB Packet Storm
226828 5.8 警告 IBM - IBM WebSphere Commerce におけるリクエストを発行される脆弱性 CWE-287
不適切な認証
CVE-2013-2993 2013-08-2 17:53 2013-07-30 Show GitHub Exploit DB Packet Storm
226829 9.3 危険 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2785 2013-08-2 16:20 2013-06-11 Show GitHub Exploit DB Packet Storm
226830 4.3 警告 CA Technologies - CA Service Desk Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2630 2013-08-2 16:02 2013-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208621 8.8 HIGH
Network
imagely nextgen_gallery A Cross-Site Request Forgery (CSRF) issue in the NextGEN Gallery plugin before 3.5.0 for WordPress allows File Upload and Local File Inclusion via settings modification, leading to Remote Code Execut… CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2020-35942 2024-11-21 14:28 2021-02-10 Show GitHub Exploit DB Packet Storm
208622 8.8 HIGH
Network
symonics
fedoraproject
libmysofa
fedora
Buffer overflow in readDataVar in hdf/dataobject.c in Symonics libmysofa 0.5 - 1.1 allows attackers to execute arbitrary code via a crafted SOFA. CWE-120
Classic Buffer Overflow
CVE-2020-36152 2024-11-21 14:28 2021-02-9 Show GitHub Exploit DB Packet Storm
208623 6.5 MEDIUM
Network
symonics
fedoraproject
libmysofa
fedora
Incorrect handling of input data in mysofa_resampler_reset_mem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block. CWE-787
 Out-of-bounds Write
CVE-2020-36151 2024-11-21 14:28 2021-02-9 Show GitHub Exploit DB Packet Storm
208624 6.5 MEDIUM
Network
symonics
fedoraproject
libmysofa
fedora
Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block. CWE-125
Out-of-bounds Read
CVE-2020-36150 2024-11-21 14:28 2021-02-9 Show GitHub Exploit DB Packet Storm
208625 6.5 MEDIUM
Network
symonics
fedoraproject
libmysofa
fedora
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protec… CWE-476
 NULL Pointer Dereference
CVE-2020-36149 2024-11-21 14:28 2021-02-9 Show GitHub Exploit DB Packet Storm
208626 6.5 MEDIUM
Network
symonics
fedoraproject
libmysofa
fedora
Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protec… CWE-476
 NULL Pointer Dereference
CVE-2020-36148 2024-11-21 14:28 2021-02-9 Show GitHub Exploit DB Packet Storm
208627 8.8 HIGH
Network
zohocorp manageengine_applications_manager doFilter in com.adventnet.appmanager.filter.UriCollector in Zoho ManageEngine Applications Manager through 14930 allows an authenticated SQL Injection via the resourceid parameter to showresource.do. CWE-89
SQL Injection
CVE-2020-35765 2024-11-21 14:28 2021-02-5 Show GitHub Exploit DB Packet Storm
208628 9.8 CRITICAL
Network
asus rt-ax86u_firmware ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs … CWE-120
Classic Buffer Overflow
CVE-2020-36109 2024-11-21 14:28 2021-02-1 Show GitHub Exploit DB Packet Storm
208629 5.4 MEDIUM
Network
egavilanmedia phpcrud Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'. CWE-79
Cross-site Scripting
CVE-2020-36115 2024-11-21 14:28 2021-01-29 Show GitHub Exploit DB Packet Storm
208630 7.2 HIGH
Network
opensolution quick.cms
quick.cart
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab. CWE-94
Code Injection
CVE-2020-35754 2024-11-21 14:28 2021-01-29 Show GitHub Exploit DB Packet Storm