Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227411 7.8 危険 シスコシステムズ - Cisco ASR 1000 シリーズの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2779 2013-04-15 10:05 2013-04-10 Show GitHub Exploit DB Packet Storm
227412 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliance の認証プロキシの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2013-1150 2013-04-15 10:00 2013-04-10 Show GitHub Exploit DB Packet Storm
227413 7.8 危険 シスコシステムズ - Cisco ASA および FWSM のソフトウェアにおけるサービス運用妨害 (DOS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1149 2013-04-15 09:49 2013-04-10 Show GitHub Exploit DB Packet Storm
227414 7.5 危険 Google - Google Chrome OS におけるアクセス制限を回避される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-0927 2013-04-12 16:22 2013-04-8 Show GitHub Exploit DB Packet Storm
227415 4.4 警告 レッドハット - Red Hat OpenStack Essex および Folsom の PackStack におけるデプロイされたシステムを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-1815 2013-04-12 15:56 2013-03-21 Show GitHub Exploit DB Packet Storm
227416 2.1 注意 レッドハット - Red Hat OpenStack Essex および Folsom における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6120 2013-04-12 15:51 2013-04-4 Show GitHub Exploit DB Packet Storm
227417 4 警告 フェンリル株式会社 - Sleipnir Mobile for Android において任意のエクステンション API が呼び出される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2304 2013-04-12 12:01 2013-04-12 Show GitHub Exploit DB Packet Storm
227418 4.3 警告 Splunk - Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2766 2013-04-12 11:04 2013-03-25 Show GitHub Exploit DB Packet Storm
227419 5 警告 Puppet - Puppet Labs の Puppet Enterprise におけるコンソールアクセスを取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-2716 2013-04-12 11:03 2013-03-28 Show GitHub Exploit DB Packet Storm
227420 7.5 危険 Digineo - Ruby 用 Thumbshooter gem の lib/thumbshooter.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1898 2013-04-11 19:42 2013-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202931 7.8 HIGH
Local 		wftpserver wing_ftp_server Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full p… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-8635 2024-11-21 14:39 2020-03-7 Show GitHub Exploit DB Packet Storm
202932 7.8 HIGH
Local 		wftpserver wing_ftp_server Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on files modified within the HTTP file management interface, resulting in files being saved with world-readable and worl… CWE-281
 Improper Preservation of Permissions 		CVE-2020-8634 2024-11-21 14:39 2020-03-7 Show GitHub Exploit DB Packet Storm
202933 6.8 MEDIUM
Physics 		mi mdz-25-dt_firmware An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSID or password, read the dialo… CWE-287
Improper Authentication 		CVE-2020-8994 2024-11-21 14:39 2020-03-6 Show GitHub Exploit DB Packet Storm
202934 5.3 MEDIUM
Network 		envoyproxy envoy CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspector could have been bypassed (not recognized as a TLS client) by a client using only TLS 1.3. Because TLS extensions (SNI, ALPN) were not ins… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-8660 2024-11-21 14:39 2020-03-5 Show GitHub Exploit DB Packet Storm
202935 5.3 MEDIUM
Network 		cncf envoy CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same secret (e.g. trusted CA) across many resources together with the combined valida… CWE-287
Improper Authentication 		CVE-2020-8664 2024-11-21 14:39 2020-03-5 Show GitHub Exploit DB Packet Storm
202936 7.5 HIGH
Network 		cncf
redhat 		envoy
openshift_service_mesh 		CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8661 2024-11-21 14:39 2020-03-5 Show GitHub Exploit DB Packet Storm
202937 7.5 HIGH
Network 		cncf
redhat
debian 		envoy
openshift_service_mesh
debian_linux 		CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-8659 2024-11-21 14:39 2020-03-5 Show GitHub Exploit DB Packet Storm
202938 9.8 CRITICAL
Network 		zyxel nas326_firmware
nas520_firmware
nas540_firmware
nas542_firmware
atp100_firmware
atp200_firmware
atp500_firmware
atp800_firmware
usg20-vpn_firmware
usg20w-vpn_firmware
us… 		Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to… CWE-78
OS Command  		CVE-2020-9054 2024-11-21 14:39 2020-03-5 Show GitHub Exploit DB Packet Storm
202939 5.4 MEDIUM
Network 		alfresco alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project. CWE-79
Cross-site Scripting 		CVE-2020-8778 2024-11-21 14:39 2020-03-3 Show GitHub Exploit DB Packet Storm
202940 5.4 MEDIUM
Network 		alfresco alfresco Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document. CWE-79
Cross-site Scripting 		CVE-2020-8777 2024-11-21 14:39 2020-03-3 Show GitHub Exploit DB Packet Storm