Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228221 4.3 警告 IBM - IBM Security AppScan Enterprise におけるテストアカウントをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0510 2013-04-2 15:11 2013-03-25 Show GitHub Exploit DB Packet Storm
228222 4.3 警告 IBM - IBM Security AppScan Enterprise および Rational Policy Tester における認証資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0474 2013-04-2 15:09 2013-03-25 Show GitHub Exploit DB Packet Storm
228223 4.3 警告 IBM - IBM Security AppScan Enterprise および IBM Rational Policy Tester におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0473 2013-04-2 15:03 2013-03-25 Show GitHub Exploit DB Packet Storm
228224 6.8 警告 IBM - IBM Tivoli Endpoint Manager の SUA アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0452 2013-04-2 14:59 2013-03-20 Show GitHub Exploit DB Packet Storm
228225 5 警告 Digium - 複数の Asterisk 製品におけるサービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性 CWE-119
バッファエラー
CVE-2013-2686 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
228226 7.5 危険 Digium - Asterisk Open Source の res/res_format_attr_h264.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2685 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
228227 5 警告 Digium - 複数の Asterisk 製品の SIP チャンネルドライバにおけるアカウント名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2013-2264 2013-04-2 14:34 2013-02-21 Show GitHub Exploit DB Packet Storm
228228 7.5 危険 Synchroweb Technology - Synchroweb Technology SynConnect の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2690 2013-04-2 14:03 2013-03-28 Show GitHub Exploit DB Packet Storm
228229 - - ヒューレット・パッカード - ** 削除 ** HP ProCurve 1700-8 および 1700-24 スイッチにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2012-5216 2013-04-2 13:53 2013-03-25 Show GitHub Exploit DB Packet Storm
228230 4.3 警告 アップル
Google
- Google Chrome におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3058 2013-04-2 11:33 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
203481 7.8 HIGH
Local
redsoftware pdfescape An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking. CWE-426
 Untrusted Search Path
CVE-2020-9418 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm
203482 7.5 HIGH
Network
d-link dsl-2640b_firmware An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the… CWE-306
Missing Authentication for Critical Function
CVE-2020-9544 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm
203483 8.8 HIGH
Network
djangoproject
debian
fedoraproject
netapp
canonical
django
debian_linux
fedora
steelstore_cloud_integrated_storage
ubuntu_linux
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a sui… CWE-89
SQL Injection
CVE-2020-9402 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm
203484 9.8 CRITICAL
Network
whmcssmarters web_tv_player IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-9380 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
203485 9.1 CRITICAL
Network
humaxdigital hga12r-02_firmware HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking. CWE-384
 Session Fixation
CVE-2020-9370 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
203486 9.8 CRITICAL
Network
rubetek smarthome_firmware Rubetek SmartHome 2020 devices use unencrypted 433 MHz communication between controllers and beacons, allowing an attacker to sniff and spoof beacon requests remotely. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-9550 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
203487 9.8 CRITICAL
Network
humaxdigital hga12r-02_firmware An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capt… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-9477 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
203488 7.5 HIGH
Network
commscope arris_tg1692a_firmware ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding. CWE-326
Inadequate Encryption Strength
CVE-2020-9476 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
203489 7.8 HIGH
Local
codepeople appointment_booking_calendar The Appointment Booking Calendar plugin before 1.3.35 for WordPress allows user input (in fields such as Description or Name) in any booking form to be any formula, which then could be exported via t… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-9372 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
203490 4.8 MEDIUM
Network
codepeople appointment_booking_calendar Stored XSS exists in the Appointment Booking Calendar plugin before 1.3.35 for WordPress. In the cpabc_appointments.php file, the Calendar Name input could allow attackers to inject arbitrary JavaScr… CWE-79
Cross-site Scripting
CVE-2020-9371 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm