Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227101	2.1	注意	インテル	-	Intel Wireless WiMAX Connection 2400 用 Intel WiMAX Network Service における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-4217	2013-08-27 19:23	2013-08-8	Show	GitHub Exploit DB Packet Storm

227102	2.1	注意	インテル	-	Intel Wireless WiMAX Connection 2400 用 Intel WiMAX Network Service におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4216	2013-08-27 19:22	2013-08-8	Show	GitHub Exploit DB Packet Storm

227103	5.8	警告	Amazon.com, Inc. Apache Software Foundation	-	Amazon FPS merchant Java SDK で使用される Apache Commons HttpClient における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2012-5783	2013-08-27 18:48	2012-11-4	Show	GitHub Exploit DB Packet Storm

227104	10	危険	Mozilla Foundation	-	複数の Mozilla 製品の nsWindow::OnExposeEvent 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5829	2013-08-27 18:20	2012-11-20	Show	GitHub Exploit DB Packet Storm

227105	5	警告	Paolo Bacchilega	-	File Roller におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-4668	2013-08-27 18:17	2013-05-27	Show	GitHub Exploit DB Packet Storm

227106	7.1	危険	ISC, Inc.	-	ISC DHCP におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3955	2013-08-27 17:19	2012-09-12	Show	GitHub Exploit DB Packet Storm

227107	5.1	警告	Willy Tarreau	-	HAProxy のヘッダキャプチャ機能のトラッシュバッファにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2942	2013-08-27 17:01	2012-05-27	Show	GitHub Exploit DB Packet Storm

227108	4.3	警告	Myrephp Programming	-	MYRE Business Directory の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6589	2013-08-27 16:41	2012-11-14	Show	GitHub Exploit DB Packet Storm

227109	7.5	危険	Myrephp Programming	-	MYRE Business Directory の links.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-6588	2013-08-27 16:40	2012-11-14	Show	GitHub Exploit DB Packet Storm

227110	4.3	警告	Myrephp Programming	-	MYRE Vacation Rental Software の vacation/1_mobile/alert_members.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6587	2013-08-27 16:38	2012-11-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220731	9.8	CRITICAL Network	advantech	webaccess\/nms	An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control.	CWE-22 Path Traversal	CVE-2020-10631	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220732	7.5	HIGH Network	advantech	webaccess\/nms	WebAccess/NMS (versions prior to 3.0.2) does not sanitize XML input. Specially crafted XML input could allow an attacker to read sensitive files.	CWE-611 XXE	CVE-2020-10629	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220733	9.8	CRITICAL Network	advantech	webaccess\/nms	WebAccess/NMS (versions prior to 3.0.2) allows an unauthenticated remote user to create a new admin account.	CWE-306 Missing Authentication for Critical Function	CVE-2020-10625	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220734	6.5	MEDIUM Network	advantech	webaccess\/nms	Multiple vulnerabilities could allow an attacker with low privileges to perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.	CWE-89 SQL Injection	CVE-2020-10623	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220735	9.1	CRITICAL Network	advantech	webaccess\/nms	An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control.	CWE-22 Path Traversal	CVE-2020-10619	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220736	7.5	HIGH Network	advantech	webaccess\/nms	There are multiple ways an unauthenticated attacker could perform SQL injection on WebAccess/NMS (versions prior to 3.0.2) to gain access to sensitive information.	CWE-89 SQL Injection	CVE-2020-10617	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220737	8.8	HIGH Network	advantech	webaccess\/nms	WebAccess/NMS (versions prior to 3.0.2) does not properly sanitize user input and may allow an attacker to inject system commands remotely.	CWE-78 OS Command	CVE-2020-10603	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220738	9.8	CRITICAL Network	advantech	webaccess\/nms	Multiple issues exist that allow files to be uploaded and executed on the WebAccess/NMS (versions prior to 3.0.2).	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10621	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220739	7.8	HIGH Local	tencent	qqbrowser	QQBrowser before 10.5.3870.400 installs a Windows service TsService.exe. This file is writable by anyone belonging to the NT AUTHORITY\Authenticated Users group, which includes all local and remote u…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-10551	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

220740	6.8	MEDIUM Physics	mi	xiaomi_xiaoai_speaker_pro_lx06_firmware	An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can (i) read Wi-Fi SSID or password, (ii) read the dialogu…	CWE-306 Missing Authentication for Critical Function	CVE-2020-10263	2024-11-21 13:55	2020-04-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed