Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226861 6.8 警告 シーメンス - SIMATIC PCS7 および他の製品で使用される Siemens WinCC におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0674 2013-03-25 19:00 2013-03-15 Show GitHub Exploit DB Packet Storm
226862 3.5 注意 シーメンス - Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0672 2013-03-25 18:58 2013-03-15 Show GitHub Exploit DB Packet Storm
226863 4 警告 シーメンス - Siemens WinCC におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0671 2013-03-25 18:54 2013-03-15 Show GitHub Exploit DB Packet Storm
226864 4.3 警告 シーメンス - Siemens WinCC の HMI Web アプリケーションにおける CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2013-0670 2013-03-25 18:52 2013-03-15 Show GitHub Exploit DB Packet Storm
226865 4 警告 シーメンス - Siemens WinCC の HMI Web アプリケーションにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-0669 2013-03-25 18:52 2013-03-15 Show GitHub Exploit DB Packet Storm
226866 4.3 警告 シーメンス - Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0668 2013-03-25 18:49 2013-03-15 Show GitHub Exploit DB Packet Storm
226867 5 警告 MailUp - WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2640 2013-03-25 16:43 2013-03-15 Show GitHub Exploit DB Packet Storm
226868 5 警告 MailUp - WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0731 2013-03-25 16:41 2013-03-15 Show GitHub Exploit DB Packet Storm
226869 5 警告 Piwik - Piwik における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2633 2013-03-25 16:35 2013-03-8 Show GitHub Exploit DB Packet Storm
226870 4.3 警告 Piwik - Piwik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1844 2013-03-25 16:34 2013-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208721 6.7 MEDIUM
Local
google android In xfrm6_tunnel_free_spi of net/ipv6/xfrm6_tunnel.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges need… CWE-416
CWE-667
 Use After Free
 Improper Locking
CVE-2020-27066 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208722 3.3 LOW
Local
google android In getGpuStatsGlobalInfo and getGpuStatsAppInfo of GpuService.cpp, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of gpu stat… CWE-862
 Missing Authorization
CVE-2020-27057 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208723 3.3 LOW
Local
google android In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of package metadata with no additional execution privileges needed. User interaction i… CWE-862
 Missing Authorization
CVE-2020-27056 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208724 7.5 HIGH
Network
google android In isSubmittable and showWarningMessagesIfAppropriate of WifiConfigController.java and WifiConfigController2.java, there is a possible insecure WiFi configuration due to improper input validation. Th… CWE-311
Missing Encryption of Sensitive Data
CVE-2020-27055 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208725 7.8 HIGH
Local
google android In onFactoryReset of BluetoothManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti… CWE-862
 Missing Authorization
CVE-2020-27054 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208726 4.4 MEDIUM
Local
google android In broadcastWifiCredentialChanged of ClientModeImpl.java, there is a possible location permission bypass due to a missing permission check. This could lead to local information disclosure of the WiFi… CWE-862
 Missing Authorization
CVE-2020-27053 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208727 7.8 HIGH
Local
google android In getLockTaskLaunchMode of ActivityRecord.java, there is a possible way for any app to start in Lock Task Mode due to a permissions bypass. This could lead to local escalation of privilege with no a… CWE-862
 Missing Authorization
CVE-2020-27052 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208728 7.8 HIGH
Local
google android In NFA_RwI93WriteMultipleBlocks of nfa_rw_api.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution pri… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound
CVE-2020-27051 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208729 7.8 HIGH
Local
google android In rw_i93_send_cmd_write_multi_blocks of rw_i93.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional executio… CWE-787
 Out-of-bounds Write
CVE-2020-27050 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm
208730 7.8 HIGH
Local
google android In rw_t3t_send_raw_frame of rw_t3t.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges … CWE-787
 Out-of-bounds Write
CVE-2020-27049 2024-11-21 14:20 2020-12-16 Show GitHub Exploit DB Packet Storm