Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227391 4.3 警告 w-CMS - w-CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6523 2013-02-1 15:47 2013-01-31 Show GitHub Exploit DB Packet Storm
227392 7.5 危険 ICU project
アップル
- ICU の common/uloc.c 内の _canonicalize 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4599 2013-01-31 16:00 2012-06-21 Show GitHub Exploit DB Packet Storm
227393 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-3589 2013-01-31 15:03 2012-07-25 Show GitHub Exploit DB Packet Storm
227394 2.6 注意 株式会社ウェザーニューズ - Android 版 ウェザーニュースタッチにおいて位置情報をログに出力する脆弱性 CWE-200
情報漏えい
CVE-2012-5187 2013-01-31 12:00 2013-01-31 Show GitHub Exploit DB Packet Storm
227395 6.8 警告 アップル
サイバートラスト株式会社
LibTIFF
レッドハット
- LibTIFF の Thunder デコーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1167 2013-01-31 10:10 2011-03-28 Show GitHub Exploit DB Packet Storm
227396 5.1 警告 アップル - Apple iOS 6.1 未満の StoreKit におけるアクセス制限を回避される脆弱性 CWE-DesignError
CVE-2013-0974 2013-01-30 16:03 2013-01-29 Show GitHub Exploit DB Packet Storm
227397 6.8 警告 アップル - Apple iOS 6.1 未満で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-0968 2013-01-30 16:02 2013-01-29 Show GitHub Exploit DB Packet Storm
227398 3.6 注意 アップル - Apple iOS および Apple TV のカーネルにおけるポインタの制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0964 2013-01-30 16:01 2013-01-29 Show GitHub Exploit DB Packet Storm
227399 7.2 危険 Beijer Electronics - Beijer ADP および H-Designer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4696 2013-01-29 16:56 2013-01-24 Show GitHub Exploit DB Packet Storm
227400 5 警告 Moxiecode Systems AB
Moodle
- Moodle で使用される TinyMCE 用 PHP Spellchecker における任意のアウトバウンド HTTP リクエストを誘発される脆弱性 CWE-noinfo
情報不足
CVE-2012-6112 2013-01-29 16:55 2013-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215481 7.7 HIGH
Network
postgresql
quarkus
netapp
fedoraproject
debian
postgresql_jdbc_driver
quarkus
steelstore_cloud_integrated_storage
fedora
debian_linux
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE. CWE-611
XXE
CVE-2020-13692 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215482 6.1 MEDIUM
Network
phplist phplist phpList before 3.5.4 allows XSS via /lists/admin/user.php and /lists/admin/users.php. CWE-79
Cross-site Scripting
CVE-2020-13827 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215483 7.7 HIGH
Network
indutny elliptic The Elliptic package 6.5.2 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\0' bytes, or integer overflows. This could conceivably have a security-relevant impact… CWE-190
 Integer Overflow or Wraparound
CVE-2020-13822 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215484 7.5 HIGH
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-13810 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215485 7.5 HIGH
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13809 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215486 7.5 HIGH
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13808 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215487 7.5 HIGH
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-13807 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215488 7.5 HIGH
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation. CWE-416
 Use After Free
CVE-2020-13806 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215489 9.8 CRITICAL
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures. CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-13805 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm
215490 9.8 CRITICAL
Network
foxitsoftware reader
phantompdf
An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin. CWE-798
 Use of Hard-coded Credentials
CVE-2020-13804 2024-11-21 14:01 2020-06-5 Show GitHub Exploit DB Packet Storm