Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226891	7.5	危険	Cotonti Team	-	Cotonti の modules/rss/rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4789	2013-08-13 17:27	2013-07-17	Show	GitHub Exploit DB Packet Storm

226892	4.3	警告	Magnolia International	-	Magnolia CMS 用 Magnolia Form モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4759	2013-08-13 17:23	2013-07-17	Show	GitHub Exploit DB Packet Storm

226893	7.5	危険	Netwin Ltd	-	NetWin SurgeFTP におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-4742	2013-08-13 16:59	2013-07-22	Show	GitHub Exploit DB Packet Storm

226894	4.3	警告	Franz Holzinger	-	TYPO3 用 Static Methods since 2007 エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5100	2013-08-13 16:49	2013-01-11	Show	GitHub Exploit DB Packet Storm

226895	4.3	警告	SilverStripe	-	SilverStripe CMS 用 SilverStripe E-Commerce モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6458	2013-08-13 16:41	2012-12-22	Show	GitHub Exploit DB Packet Storm

226896	7.5	危険	The YardRadius Project	-	Yet Another Radius Daemon におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2013-4147	2013-08-13 16:27	2013-07-1	Show	GitHub Exploit DB Packet Storm

226897	6.8	警告	Boris Eyrich Software	-	Artweaver におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-2576	2013-08-13 16:05	2013-07-22	Show	GitHub Exploit DB Packet Storm

226898	9.3	危険	19th Parallel	-	Sagelight における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-3480	2013-08-13 15:58	2013-07-23	Show	GitHub Exploit DB Packet Storm

226899	4	警告	IBM	-	複数の IBM サーバ製品上で稼働する Integrated Management Module における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-4038	2013-08-13 15:25	2013-08-1	Show	GitHub Exploit DB Packet Storm

226900	4.3	警告	IBM	-	複数の IBM サーバ製品上で稼働する Integrated Management Module におけるアクセス権を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-4037	2013-08-13 15:24	2013-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208551	5.5	MEDIUM Local	xcb_project	xcb	An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.	CWE-415 CWE-416 Double Free Use After Free	CVE-2020-36205	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208552	4.7	MEDIUM Local	im_project	im	An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36204	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208553	4.7	MEDIUM Local	reffers_project	reffers	An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.	CWE-362 CWE-787 Race Condition Out-of-bounds Write	CVE-2020-36203	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208554	6.1	MEDIUM Network	rust-lang	async-h1	An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.	CWE-79 Cross-site Scripting	CVE-2020-36202	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208555	6.5	MEDIUM Network	kaspersky	tinycheck	TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36200	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208556	9.8	CRITICAL Network	kaspersky	tinycheck	TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2020-36199	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208557	7.5	HIGH Network	xerox	workcentre_3655_firmware workcentre_3655i_firmware workcentre_5865_firmware workcentre_5875_firmware workcentre_5890_firmware workcentre_5865i_firmware workcentre_5875i_firmware …	An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 79…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-36201	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

208558	7.5	HIGH Network	cskaza	cszcms	SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.	CWE-89 SQL Injection	CVE-2020-36136	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

208559	5.5	MEDIUM Local	foxit	pdf_reader	Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service (DoS) vi…	CWE-120 Classic Buffer Overflow	CVE-2020-35990	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

208560	7.5	HIGH Network	ffmpeg	ffmpeg	An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS).	CWE-476 NULL Pointer Dereference	CVE-2020-36138	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed