Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227051 4.6 警告 Debian - Debian GNU/Linux 上で稼働する apache2 パッケージの apache2ctl スクリプトにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1048 2013-03-7 12:45 2013-03-4 Show GitHub Exploit DB Packet Storm
227052 6.1 警告 シスコシステムズ - Cisco Aironet アクセスポイントの HTTP Profiler におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-6026 2013-03-6 14:56 2013-02-28 Show GitHub Exploit DB Packet Storm
227053 9.3 危険 IBM - IBM Cognos Business Intelligence における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4858 2013-03-6 14:55 2013-02-27 Show GitHub Exploit DB Packet Storm
227054 5 警告 IBM - IBM Cognos Business Intelligence における XPath インジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-4840 2013-03-6 14:50 2013-02-27 Show GitHub Exploit DB Packet Storm
227055 4 警告 IBM - IBM Cognos Business Intelligence における XPath インジェクション攻撃を実行される脆弱性 CWE-200
情報漏えい 		CVE-2012-4837 2013-03-6 14:48 2013-02-27 Show GitHub Exploit DB Packet Storm
227056 3.5 注意 IBM - IBM Cognos Business Intelligence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4836 2013-03-6 14:41 2013-02-27 Show GitHub Exploit DB Packet Storm
227057 4.3 警告 IBM - IBM Cognos Business Intelligence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4835 2013-03-6 14:40 2013-02-27 Show GitHub Exploit DB Packet Storm
227058 4.3 警告 IBM - IBM Cognos Business Intelligence の Query Studio におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2193 2013-03-6 14:37 2013-02-27 Show GitHub Exploit DB Packet Storm
227059 4.3 警告 IBM - IBM Cognos Business Intelligence におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2177 2013-03-6 14:36 2013-02-27 Show GitHub Exploit DB Packet Storm
227060 5 警告 Fedora Project
レッドハット		 - System Security Services Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0220 2013-03-5 16:15 2013-02-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208611 5.4 MEDIUM
Network 		kaaproject kaa Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inject malicious web scripts or HTML Injection payloads via the Description parame… CWE-79
Cross-site Scripting 		CVE-2020-26701 2024-11-21 14:20 2020-11-18 Show GitHub Exploit DB Packet Storm
208612 9.8 CRITICAL
Network 		cisco security_manager Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected devic… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-27131 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208613 9.1 CRITICAL
Network 		cisco security_manager A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory travers… NVD-CWE-Other
CVE-2020-27130 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208614 9.8 CRITICAL
Network 		cisco security_manager A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of… CWE-20
 Improper Input Validation  		CVE-2020-27125 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208615 7.8 HIGH
Local 		binarynights forklift BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacke… CWE-862
 Missing Authorization 		CVE-2020-27192 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208616 7.5 HIGH
Network 		lionwiki lionwiki LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only aff… NVD-CWE-noinfo
CVE-2020-27191 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208617 7.5 HIGH
Network 		eclipse hono In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the m… NVD-CWE-noinfo
CVE-2020-27217 2024-11-21 14:20 2020-11-14 Show GitHub Exploit DB Packet Storm
208618 6.1 MEDIUM
Network 		sap fiori_launchpad_\(news_tile_application\) SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a differen… CWE-79
Cross-site Scripting 		CVE-2020-26825 2024-11-21 14:20 2020-11-14 Show GitHub Exploit DB Packet Storm
208619 6.1 MEDIUM
Network 		ckeditor
oracle 		ckeditor
banking_platform
peoplesoft_enterprise_peopletools
agile_plm
commerce_merchandising
jd_edwards_enterpriseone_tools
financial_services_analytical_applications_infrastructure… 		A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML co… CWE-79
Cross-site Scripting 		CVE-2020-27193 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
208620 7.2 HIGH
Network 		sapplica sentrifugo In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected b… CWE-89
SQL Injection 		CVE-2020-26805 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm