Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228371 4.3 警告 ジュニパーネットワークス - Juniper SmartPass WLAN Security Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3498 2013-05-10 14:51 2013-05-8 Show GitHub Exploit DB Packet Storm
228372 4.7 警告 ジュニパーネットワークス - Junos Space JA1500 アプライアンスなどで使用される Juniper Junos Space におけるパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-3497 2013-05-10 14:51 2013-05-8 Show GitHub Exploit DB Packet Storm
228373 3.5 注意 シマンテック - Symantec Brightmail Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1611 2013-05-10 14:07 2013-05-8 Show GitHub Exploit DB Packet Storm
228374 4.3 警告 Invensys - Invensys Wonderware Information Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0688 2013-05-10 14:07 2013-05-7 Show GitHub Exploit DB Packet Storm
228375 9.3 危険 Invensys - Invensys Wonderware Information Server における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0686 2013-05-10 14:06 2013-05-7 Show GitHub Exploit DB Packet Storm
228376 9.3 危険 Invensys - Invensys Wonderware Information Server における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0685 2013-05-10 14:06 2013-05-7 Show GitHub Exploit DB Packet Storm
228377 7.5 危険 Invensys - Invensys Wonderware Information Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-0684 2013-05-10 14:05 2013-05-7 Show GitHub Exploit DB Packet Storm
228378 9.3 危険 IBM - IBM WebSphere DataPower XC10 アプライアンスデバイスにおける認証を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0600 2013-05-10 14:04 2013-05-3 Show GitHub Exploit DB Packet Storm
228379 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-1876 2013-05-9 19:47 2012-06-12 Show GitHub Exploit DB Packet Storm
228380 6.8 警告 GroundWork - GroundWork Monitor Enterprise におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3513 2013-05-9 16:33 2013-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
217101 7.8 HIGH
Local 		mozilla firefox
firefox_esr
thunderbird 		Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: Thi… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15657 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217102 8.8 HIGH
Network 		mozilla
opensuse
canonical 		thunderbird
firefox_esr
firefox
leap
ubuntu_linux 		JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only … CWE-843
Type Confusion 		CVE-2020-15656 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217103 6.5 MEDIUM
Network 		mozilla
opensuse
canonical 		thunderbird
firefox_esr
firefox
leap
ubuntu_linux 		A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. This vulnerability affe… NVD-CWE-noinfo
CVE-2020-15655 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217104 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived brok… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-15654 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217105 6.5 MEDIUM
Network 		mozilla
canonical 		thunderbird
firefox_esr
firefox
ubuntu_linux 		An iframe sandbox element with the allow-popups flag could be bypassed when using noopener links. This could have led to security issues for websites relying on sandbox configurations that allowed po… NVD-CWE-Other
CVE-2020-15653 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217106 6.5 MEDIUM
Network 		mozilla
canonical 		firefox
firefox_esr
thunderbird
ubuntu_linux 		By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect. This applied only to content that can be parsed as script. This vulne… CWE-346
 Origin Validation Error 		CVE-2020-15652 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217107 4.3 MEDIUM
Network 		mozilla firefox A unicode RTL order character in the downloaded file name can be used to change the file's name during the download UI flow to change the file extension. This vulnerability affects Firefox for iOS < … NVD-CWE-noinfo
CVE-2020-15651 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217108 5.5 MEDIUM
Local 		mozilla firefox_esr Given an installed malicious file picker application, an attacker was able to overwrite local files and thus overwrite Firefox settings (but not access the previous profile). *Note: This issue only a… NVD-CWE-noinfo
CVE-2020-15650 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217109 5.5 MEDIUM
Local 		mozilla firefox_esr Given an installed malicious file picker application, an attacker was able to steal and upload local files of their choosing, regardless of the actually files picked. *Note: This issue only affected … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-15649 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm
217110 6.5 MEDIUM
Network 		mozilla firefox
thunderbird 		Using object or embed tags, it was possible to frame other websites, even if they disallowed framing using the X-Frame-Options header. This vulnerability affects Thunderbird < 78 and Firefox < 78.0.2. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-15648 2024-11-21 14:05 2020-08-11 Show GitHub Exploit DB Packet Storm