Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227291	10	危険	3S-Smart Software Solutions	-	3S CODESYS Gateway-Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4705	2013-02-27 15:02	2013-02-19	Show	GitHub Exploit DB Packet Storm

227292	10	危険	3S-Smart Software Solutions	-	3S CODESYS Gateway-Server における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4704	2013-02-27 15:01	2013-02-19	Show	GitHub Exploit DB Packet Storm

227293	6.8	警告	Honeywell International Inc.	-	複数の Honeywell 製品の HscRemoteDeploy.dll における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-0108	2013-02-27 14:39	2013-02-24	Show	GitHub Exploit DB Packet Storm

227294	10	危険	Novell	-	Novell GroupWise のクライアントにおける任意のコードを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-0804	2013-02-27 09:54	2013-01-23	Show	GitHub Exploit DB Packet Storm

227295	9.3	危険	Novell	-	Novell GroupWise のクライアント内の gwcls1.dll における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0439	2013-02-27 09:54	2013-01-23	Show	GitHub Exploit DB Packet Storm

227296	10	危険	BigAntSoft	-	BigAntSoft BigAnt IM Message Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-6275	2013-02-26 16:03	2013-02-24	Show	GitHub Exploit DB Packet Storm

227297	9.7	危険	BigAntSoft	-	BigAntSoft BigAnt IM Message Server における任意のファイルを作成される脆弱性	CWE-287 不適切な認証	CVE-2012-6274	2013-02-26 16:03	2013-02-24	Show	GitHub Exploit DB Packet Storm

227298	7.5	危険	BigAntSoft	-	BigAntSoft BigAnt IM Message Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-6273	2013-02-26 16:02	2013-02-24	Show	GitHub Exploit DB Packet Storm

227299	7.6	危険	VMware	-	複数の VMware 製品における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2013-1659	2013-02-26 15:37	2013-02-21	Show	GitHub Exploit DB Packet Storm

227300	7.8	危険	VMware	-	VMware vCenter Server におけるサービス運用妨害 (ディスクの消費) の脆弱性	CWE-119 バッファエラー	CVE-2012-6326	2013-02-26 15:36	2012-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208611	9.8	CRITICAL Network	conf-cfg-ini_project	conf-cfg-ini	This affects the package conf-cfg-ini before 1.2.2. If an attacker submits a malicious INI file to an application that parses it with decode, they will pollute the prototype on the application. This …	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28441	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

208612	9.8	CRITICAL Network	deferred-exec_project	deferred-exec	This affects all versions of package deferred-exec. The injection point is located in line 42 in lib/deferred-exec.js	CWE-77 Command Injection	CVE-2020-28438	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

208613	9.8	CRITICAL Network	google-cloudstorage-commands_project	google-cloudstorage-commands	This affects all versions of package google-cloudstorage-commands.	CWE-77 Command Injection	CVE-2020-28436	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

208614	9.8	CRITICAL Network	ffmpeg-sdk_project	ffmpeg-sdk	This affects all versions of package ffmpeg-sdk. The injection point is located in line 9 in index.js.	CWE-77 Command Injection	CVE-2020-28435	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

208615	7.8	HIGH Local	git-archive_project	git-archive	All versions of package git-archive are vulnerable to Command Injection via the exports function.	CWE-77 Command Injection	CVE-2020-28422	2024-11-21 14:22	2022-07-25	Show	GitHub Exploit DB Packet Storm

208616	9.8	CRITICAL Network	form	form.io	A Server-Side Template Injection (SSTI) was discovered in Form.io 2.0.0. This leads to Remote Code Execution during deletion of the default Email template URL. NOTE: the email templating service was …	CWE-74 Injection	CVE-2020-28246	2024-11-21 14:22	2022-06-2	Show	GitHub Exploit DB Packet Storm

208617	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28604	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

208618	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28603	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

208619	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confu…	-	CVE-2020-28602	2024-11-21 14:22	2022-04-19	Show	GitHub Exploit DB Packet Storm

208620	7.2	HIGH Network	hisiphp	hisiphp	An Access Control vulnerability exists in HisiPHP 2.0.11 via special packets that are constructed in $files = Dir::getList($decompath. '/ Upload/Plugins /, which could let a remote malicious user exe…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28062	2024-11-21 14:22	2022-04-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed