Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228381 4.3 警告 IBM - IBM Security AppScan Enterprise および Rational Policy Tester における認証資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0474 2013-04-2 15:09 2013-03-25 Show GitHub Exploit DB Packet Storm
228382 4.3 警告 IBM - IBM Security AppScan Enterprise および IBM Rational Policy Tester におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0473 2013-04-2 15:03 2013-03-25 Show GitHub Exploit DB Packet Storm
228383 6.8 警告 IBM - IBM Tivoli Endpoint Manager の SUA アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0452 2013-04-2 14:59 2013-03-20 Show GitHub Exploit DB Packet Storm
228384 5 警告 Digium - 複数の Asterisk 製品におけるサービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性 CWE-119
バッファエラー
CVE-2013-2686 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
228385 7.5 危険 Digium - Asterisk Open Source の res/res_format_attr_h264.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2685 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
228386 5 警告 Digium - 複数の Asterisk 製品の SIP チャンネルドライバにおけるアカウント名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2013-2264 2013-04-2 14:34 2013-02-21 Show GitHub Exploit DB Packet Storm
228387 7.5 危険 Synchroweb Technology - Synchroweb Technology SynConnect の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2690 2013-04-2 14:03 2013-03-28 Show GitHub Exploit DB Packet Storm
228388 - - ヒューレット・パッカード - ** 削除 ** HP ProCurve 1700-8 および 1700-24 スイッチにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2012-5216 2013-04-2 13:53 2013-03-25 Show GitHub Exploit DB Packet Storm
228389 4.3 警告 アップル
Google
- Google Chrome におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3058 2013-04-2 11:33 2012-03-28 Show GitHub Exploit DB Packet Storm
228390 4.3 警告 アルバネットワークス株式会社 - Mobility Controller で使用される Aruba Networks ArubaOS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2290 2013-04-1 20:54 2013-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
203511 8.8 HIGH
Network
dlink dir-615jx10_firmware fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed. CWE-787
 Out-of-bounds Write
CVE-2020-9534 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
203512 5.4 MEDIUM
Network
webnus modern_events_calendar_lite Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to… CWE-79
Cross-site Scripting
CVE-2020-9459 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203513 8.8 HIGH
Network
justblab blab\!_ws_pro
blab\!_ax_pro
blab\!_ax
blab\!_ws
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to es… CWE-330
 Use of Insufficiently Random Values
CVE-2020-9449 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203514 6.1 MEDIUM
Network
export_users_to_csv_project export_users_to_csv The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-9466 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203515 9.8 CRITICAL
Network
eyesofnetwork eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such … CWE-89
SQL Injection
CVE-2020-9465 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203516 8.8 HIGH
Network
centreon centreon Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_rem… CWE-78
OS Command 
CVE-2020-9463 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203517 6.1 MEDIUM
Network
gwtupload_project gwtupload There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which wo… CWE-79
Cross-site Scripting
CVE-2020-9447 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203518 7.8 HIGH
Local
openvpn connect OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dl… CWE-281
 Improper Preservation of Permissions
CVE-2020-9442 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
203519 5.5 MEDIUM
Local
avast antivirus_for_linux
antivirus_pro_plus
antivirus_pro
The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. CWE-436
 Interpretation Conflict
CVE-2020-9399 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
203520 9.1 CRITICAL
Network
lua-openssl_project lua-openssl openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation 
CVE-2020-9434 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm