Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228381 6.5 警告 GroundWork - GroundWork Monitor Enterprise における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3510 2013-05-9 16:31 2013-03-7 Show GitHub Exploit DB Packet Storm
228382 6.5 警告 GroundWork - GroundWork Monitor Enterprise の NeDi コンポーネントにおける任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3509 2013-05-9 16:30 2013-03-7 Show GitHub Exploit DB Packet Storm
228383 6.5 警告 GroundWork - GroundWork Monitor Enterprise の NeDi コンポーネントにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3508 2013-05-9 16:26 2013-03-7 Show GitHub Exploit DB Packet Storm
228384 4 警告 GroundWork - GroundWork Monitor Enterprise の NeDi コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-3507 2013-05-9 16:24 2013-03-7 Show GitHub Exploit DB Packet Storm
228385 7.5 危険 GroundWork - GroundWork Monitor Enterprise の Performance コンポーネントにおける任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3506 2013-05-9 16:23 2013-03-7 Show GitHub Exploit DB Packet Storm
228386 4 警告 GroundWork - GroundWork Monitor Enterprise の Nagios-App コンポーネントにおけるアクセス制限を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-3505 2013-05-9 16:22 2013-03-7 Show GitHub Exploit DB Packet Storm
228387 5.5 警告 GroundWork - GroundWork Monitor Enterprise の MONARCH コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3504 2013-05-9 16:21 2013-03-7 Show GitHub Exploit DB Packet Storm
228388 3.5 注意 GroundWork - GroundWork Monitor Enterprise の MONARCH コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3503 2013-05-9 16:18 2013-03-7 Show GitHub Exploit DB Packet Storm
228389 6.5 警告 GroundWork - GroundWork Monitor Enterprise における任意のコマンドを実行される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-3502 2013-05-9 16:17 2013-03-7 Show GitHub Exploit DB Packet Storm
228390 4.3 警告 GroundWork - GroundWork Monitor Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3501 2013-05-9 16:16 2013-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216841 8.8 HIGH
Network 		lua lua Lua through 5.4.0 mishandles the interaction between stack resizes and garbage collection, leading to a heap-based buffer overflow, heap-based buffer over-read, or use-after-free. CWE-125
CWE-787
CWE-416
Out-of-bounds Read
 Out-of-bounds Write
 Use After Free 		CVE-2020-15888 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216842 7.8 HIGH
Local 		360totalsecurity 360_total_security In the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacki… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15724 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216843 7.8 HIGH
Local 		360totalsecurity 360_total_security In the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total Security calls GameChrome.exe, there exists a local privilege escalation vulnerability. An attacker who … CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15723 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216844 7.8 HIGH
Local 		360totalsecurity 360_total_security In version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there exists a local privilege escalation vulnerability. An attacker who could exploit DLL hijacking could e… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15722 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216845 7.5 HIGH
Network 		bitwarden server Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain IPv4 addresses (0.0.0.0/8, 127.0.0.0/8,… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-15879 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216846 8.8 HIGH
Network 		librenms librenms An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php. NVD-CWE-noinfo
CVE-2020-15877 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216847 6.5 MEDIUM
Network 		librenms librenms In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php. CWE-89
SQL Injection 		CVE-2020-15873 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216848 3.3 LOW
Local 		qemu
debian 		qemu
debian_linux 		QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address. CWE-416
 Use After Free 		CVE-2020-15859 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216849 9.8 CRITICAL
Network 		mruby
debian 		mruby
debian_linux 		mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggered via the stack_copy function. CWE-787
 Out-of-bounds Write 		CVE-2020-15866 2024-11-21 14:06 2020-07-22 Show GitHub Exploit DB Packet Storm
216850 7.8 HIGH
Local 		linux
xen
netapp 		linux_kernel
xen
cloud_backup
steelstore_cloud_integrated_storage
solidfire_baseboard_management_controller 		An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs b… CWE-276
Incorrect Default Permissions  		CVE-2020-15852 2024-11-21 14:06 2020-07-21 Show GitHub Exploit DB Packet Storm