Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227101 4.3 警告 CloudBees - CloudBees Jenkins における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2012-6072 2013-02-27 16:10 2012-11-20 Show GitHub Exploit DB Packet Storm
227102 4.3 警告 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6121 2013-02-27 16:08 2013-02-24 Show GitHub Exploit DB Packet Storm
227103 4.3 警告 The JForum Team - JForum の jforum.page におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5337 2013-02-27 16:08 2013-02-24 Show GitHub Exploit DB Packet Storm
227104 3.6 注意 レッドハット - Red Hat OpenShift Origin における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0164 2013-02-27 16:06 2013-01-31 Show GitHub Exploit DB Packet Storm
227105 2.1 注意 レッドハット - Red Hat OpenShift Origin の rhc-chk.rb における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2012-5658 2013-02-27 16:04 2013-01-31 Show GitHub Exploit DB Packet Storm
227106 5.8 警告 レッドハット - Red Hat OpenShift Origin におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-5647 2013-02-27 16:03 2013-01-8 Show GitHub Exploit DB Packet Storm
227107 7.5 危険 レッドハット - Red Hat OpenShift Origin における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5646 2013-02-27 16:02 2013-01-8 Show GitHub Exploit DB Packet Storm
227108 4.9 警告 レッドハット - Red Hat Enterprise Linux で使用される autofs におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2697 2013-02-27 15:54 2013-01-8 Show GitHub Exploit DB Packet Storm
227109 5 警告 OpenStack
Canonical
- 複数の OpenStack 製品におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-0247 2013-02-27 15:41 2013-02-5 Show GitHub Exploit DB Packet Storm
227110 4 警告 OpenStack
Canonical
- 複数の OpenStack 製品の store/swift.py における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0212 2013-02-27 15:40 2013-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208611 5.4 MEDIUM
Network
kaaproject kaa Cross-site scripting (XSS) vulnerability in Dashboards section in Kaa IoT Platform v1.2.0 allows remote attackers to inject malicious web scripts or HTML Injection payloads via the Description parame… CWE-79
Cross-site Scripting
CVE-2020-26701 2024-11-21 14:20 2020-11-18 Show GitHub Exploit DB Packet Storm
208612 9.8 CRITICAL
Network
cisco security_manager Multiple vulnerabilities in the Java deserialization function that is used by Cisco Security Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected devic… CWE-502
 Deserialization of Untrusted Data
CVE-2020-27131 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208613 9.1 CRITICAL
Network
cisco security_manager A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory travers… NVD-CWE-Other
CVE-2020-27130 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208614 9.8 CRITICAL
Network
cisco security_manager A vulnerability in Cisco Security Manager could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of… CWE-20
 Improper Input Validation 
CVE-2020-27125 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208615 7.8 HIGH
Local
binarynights forklift BinaryNights ForkLift 3.4 was compiled with the com.apple.security.cs.disable-library-validation flag enabled which allowed a local attacker to inject code into ForkLift. This would allow the attacke… CWE-862
 Missing Authorization
CVE-2020-27192 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208616 7.5 HIGH
Network
lionwiki lionwiki LionWiki before 3.2.12 allows an unauthenticated user to read files as the web server user via crafted string in the index.php f1 variable, aka Local File Inclusion. NOTE: This vulnerability only aff… NVD-CWE-noinfo
CVE-2020-27191 2024-11-21 14:20 2020-11-17 Show GitHub Exploit DB Packet Storm
208617 7.5 HIGH
Network
eclipse hono In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices. In particular, a device may send messages that are bigger than the m… NVD-CWE-noinfo
CVE-2020-27217 2024-11-21 14:20 2020-11-14 Show GitHub Exploit DB Packet Storm
208618 6.1 MEDIUM
Network
sap fiori_launchpad_\(news_tile_application\) SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a differen… CWE-79
Cross-site Scripting
CVE-2020-26825 2024-11-21 14:20 2020-11-14 Show GitHub Exploit DB Packet Storm
208619 6.1 MEDIUM
Network
ckeditor
oracle
ckeditor
banking_platform
peoplesoft_enterprise_peopletools
agile_plm
commerce_merchandising
jd_edwards_enterpriseone_tools
financial_services_analytical_applications_infrastructure…
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML co… CWE-79
Cross-site Scripting
CVE-2020-27193 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
208620 7.2 HIGH
Network
sapplica sentrifugo In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected b… CWE-89
SQL Injection
CVE-2020-26805 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm