Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226941	4.3	警告	OrangeHRM	-	OrangeHRM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5258	2013-02-15 18:58	2013-02-12	Show	GitHub Exploit DB Packet Storm

226942	4.3	警告	AppThemes	-	WordPress 用 Classipress テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5257	2013-02-15 18:57	2011-10-7	Show	GitHub Exploit DB Packet Storm

226943	2.6	注意	LimeSurvey	-	LimeSurvey におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5256	2013-02-15 18:56	2012-02-9	Show	GitHub Exploit DB Packet Storm

226944	5	警告	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-1455	2013-02-15 16:51	2013-02-4	Show	GitHub Exploit DB Packet Storm

226945	2.1	注意	Bitbucket	-	xNBD の xnbd-server および xndb-wrapperr における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0265	2013-02-15 16:48	2013-02-13	Show	GitHub Exploit DB Packet Storm

226946	5	警告	LSIロジック株式会社	-	3DM (3ware Disk Manager) におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-0705	2013-02-15 12:00	2013-02-15	Show	GitHub Exploit DB Packet Storm

226947	9.3	危険	Fabrice Bellard	-	Qemu の e1000 デバイスドライバにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-6075	2013-02-15 11:56	2013-02-13	Show	GitHub Exploit DB Packet Storm

226948	10	危険	アドビシステムズ	-	Adobe Shockwave Player におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0636	2013-02-15 11:09	2013-02-12	Show	GitHub Exploit DB Packet Storm

226949	10	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-0635	2013-02-15 11:08	2013-02-12	Show	GitHub Exploit DB Packet Storm

226950	4.9	警告	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-362 競合状態	CVE-2013-1277	2013-02-14 17:11	2013-02-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208801	7.5	HIGH Network	sized-chunks_project	sized-chunks	An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair().	CWE-129 Improper Validation of Array Index	CVE-2020-25792	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208802	7.5	HIGH Network	sized-chunks_project	sized-chunks	An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit().	CWE-129 Improper Validation of Array Index	CVE-2020-25791	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208803	7.2	HIGH Network	typesettercms	typesetter	Typesetter CMS 5.x through 5.1 allows admins to upload and execute arbitrary PHP code via a .php file inside a ZIP archive. NOTE: the vendor disputes the significance of this report because "admins a…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-25790	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208804	6.1	MEDIUM Network	tt-rss	tiny_tiny_rss	An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. The cached_url feature mishandles JavaScript inside an SVG document.	CWE-79 Cross-site Scripting	CVE-2020-25789	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208805	8.1	HIGH Network	tt-rss	tiny_tiny_rss	An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. imgproxy in plugins/af_proxy_http/init.php mishandles $_REQUEST["url"] in an error message.	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2020-25788	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208806	9.8	CRITICAL Network	tt-rss	tiny_tiny_rss	An issue was discovered in Tiny Tiny RSS (aka tt-rss) before 2020-09-16. It does not validate all URLs before requesting them.	CWE-20 Improper Input Validation	CVE-2020-25787	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208807	6.1	MEDIUM Network	dlink	dir-803_firmware dir-816l_firmware dir-645_firmware dir-815_firmware dir-860l_firmware dir-865l_firmware	webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by…	CWE-79 Cross-site Scripting	CVE-2020-25786	2024-11-21 14:18	2020-09-20	Show	GitHub Exploit DB Packet Storm

208808	5.3	MEDIUM Network	redhat quarkus	resteasy quarkus	A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive information when the server got WebApplicatio…	CWE-209 Information Exposure Through an Error Message	CVE-2020-25633	2024-11-21 14:18	2020-09-19	Show	GitHub Exploit DB Packet Storm

208809	7.5	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked to the login page.	NVD-CWE-noinfo	CVE-2020-25766	2024-11-21 14:18	2020-09-19	Show	GitHub Exploit DB Packet Storm

208810	9.8	CRITICAL Network	cesanta	mongoose	A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP header can exploit this bug. NOTE: a committer has …	CWE-120 Classic Buffer Overflow	CVE-2020-25756	2024-11-21 14:18	2020-09-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed