Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228161 5 警告 Palo Alto Networks - Palo Alto Networks PAN-OS の Web ベースの管理 UI における詳細エラー情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-6590 2013-09-4 13:56 2012-04-27 Show GitHub Exploit DB Packet Storm
228162 6.9 警告 LULU Software - Soda PDF における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-3485 2013-09-4 13:54 2013-08-12 Show GitHub Exploit DB Packet Storm
228163 7.1 危険 シスコシステムズ - Cisco IOS の TCP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-5469 2013-09-4 13:54 2013-09-3 Show GitHub Exploit DB Packet Storm
228164 5 警告 Google - Google Chrome の memory/shared_memory_posix.cc における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2905 2013-09-4 11:26 2013-08-20 Show GitHub Exploit DB Packet Storm
228165 7.5 危険 Google - Google Chrome で使用される Blink の core/dom/Document.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2904 2013-09-4 11:25 2013-08-20 Show GitHub Exploit DB Packet Storm
228166 6.3 警告 シスコシステムズ - Cisco Wireless LAN Controller デバイスの Web 管理者インタフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-3474 2013-09-4 11:03 2013-09-3 Show GitHub Exploit DB Packet Storm
228167 10 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3346 2013-09-4 11:02 2013-05-14 Show GitHub Exploit DB Packet Storm
228168 7.5 危険 The Cacti Group - Cacti の snmp.php および rrd.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1435 2013-09-4 11:01 2013-08-6 Show GitHub Exploit DB Packet Storm
228169 7.5 危険 The Cacti Group - Cacti の api_poller.php および utility.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-1434 2013-09-4 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
228170 7.5 危険 アップル
サイバートラスト株式会社
pcre.org
レッドハット		 - PCRE ライブラリにおける正規表現の取り扱いに関する任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2007-1659 2013-09-2 18:40 2007-11-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 26, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
217221 6.1 MEDIUM
Network 		bestsoftinc car_rental_system An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields. CWE-79
Cross-site Scripting 		CVE-2020-15535 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
217222 7.5 HIGH
Network 		wireshark
opensuse
debian 		wireshark
leap
debian_linux 		In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-15466 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217223 7.8 HIGH
Local 		valvesoftware steam_client An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAM… CWE-362
Race Condition 		CVE-2020-15530 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217224 7.8 HIGH
Local 		gog galaxy An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak fil… CWE-667
CWE-732
 Improper Locking
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15529 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217225 7.8 HIGH
Local 		gog galaxy An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity che… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15528 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217226 7.8 HIGH
Local 		python
netapp 		python
snapcenter 		In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native appl… CWE-427
CWE-908
 Uncontrolled Search Path Element
 Use of Uninitialized Resource 		CVE-2020-15523 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217227 8.8 HIGH
Network 		veeam veeam_availability_suite
veeam_backup_\&_replication 		VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O req… CWE-862
 Missing Authorization 		CVE-2020-15518 2024-11-21 14:05 2020-07-3 Show GitHub Exploit DB Packet Storm
217228 2.3 LOW
Local 		qemu
debian 		qemu
debian_linux 		In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2020-15469 2024-11-21 14:05 2020-07-3 Show GitHub Exploit DB Packet Storm
217229 7.5 HIGH
Network 		libraw
fedoraproject
debian 		libraw
fedora
debian_linux 		LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed… CWE-20
 Improper Input Validation  		CVE-2020-15503 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
217230 7.5 HIGH
Network 		duckduckgo duckduckgo The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which mig… CWE-200
Information Exposure 		CVE-2020-15502 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm