Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227391	4.3	警告	w-CMS	-	w-CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6523	2013-02-1 15:47	2013-01-31	Show	GitHub Exploit DB Packet Storm

227392	7.5	危険	ICU project アップル	-	ICU の common/uloc.c 内の _canonicalize 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4599	2013-01-31 16:00	2012-06-21	Show	GitHub Exploit DB Packet Storm

227393	9.3	危険	アップル	-	複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-3589	2013-01-31 15:03	2012-07-25	Show	GitHub Exploit DB Packet Storm

227394	2.6	注意	株式会社ウェザーニューズ	-	Android 版ウェザーニュースタッチにおいて位置情報をログに出力する脆弱性	CWE-200 情報漏えい	CVE-2012-5187	2013-01-31 12:00	2013-01-31	Show	GitHub Exploit DB Packet Storm

227395	6.8	警告	アップルサイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の Thunder デコーダにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1167	2013-01-31 10:10	2011-03-28	Show	GitHub Exploit DB Packet Storm

227396	5.1	警告	アップル	-	Apple iOS 6.1 未満の StoreKit におけるアクセス制限を回避される脆弱性	CWE-DesignError	CVE-2013-0974	2013-01-30 16:03	2013-01-29	Show	GitHub Exploit DB Packet Storm

227397	6.8	警告	アップル	-	Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-0968	2013-01-30 16:02	2013-01-29	Show	GitHub Exploit DB Packet Storm

227398	3.6	注意	アップル	-	Apple iOS および Apple TV のカーネルにおけるポインタの制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0964	2013-01-30 16:01	2013-01-29	Show	GitHub Exploit DB Packet Storm

227399	7.2	危険	Beijer Electronics	-	Beijer ADP および H-Designer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4696	2013-01-29 16:56	2013-01-24	Show	GitHub Exploit DB Packet Storm

227400	5	警告	Moxiecode Systems AB Moodle	-	Moodle で使用される TinyMCE 用 PHP Spellchecker における任意のアウトバウンド HTTP リクエストを誘発される脆弱性	CWE-noinfo 情報不足	CVE-2012-6112	2013-01-29 16:55	2013-01-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208321	6.1	MEDIUM Network	tranzware_payment_gateway_project	tranzware_payment_gateway	A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (diff…	CWE-79 Cross-site Scripting	CVE-2020-28415	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

208322	6.1	MEDIUM Network	tranzware_payment_gateway_project	tranzware_payment_gateway	A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (diff…	CWE-79 Cross-site Scripting	CVE-2020-28414	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

208323	9.8	CRITICAL Network	deephas_project	deephas	Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28271	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

208324	9.8	CRITICAL Network	mjpclab	object-hierarchy-access	Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28270	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

208325	9.8	CRITICAL Network	exodus	field	Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28269	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

208326	5.3	MEDIUM Network	lettre	lettre	The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.	NVD-CWE-noinfo	CVE-2020-28247	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

208327	5.4	MEDIUM Network	dundas	dundas_bi	The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur.	CWE-79 Cross-site Scripting	CVE-2020-28409	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm

208328	5.4	MEDIUM Network	dundas	dundas_bi	The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.	CWE-79 Cross-site Scripting	CVE-2020-28408	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm

208329	4.4	MEDIUM Local	xen fedoraproject debian	xen fedora debian_linux	Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Pl…	CWE-862 Missing Authorization	CVE-2020-28368	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm

208330	7.8	HIGH Local	tcl	32s330_firmware 40s330_firmware 43s434_firmware 50s434_firmware 55s434_firmware 65s434_firmware 75s434_firmware	A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a …	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-28055	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm