Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228391 7.1 危険 シスコシステムズ - Cisco IOS および IOS XE の RSVP プロトコルの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-1143 2013-04-1 20:19 2013-03-27 Show GitHub Exploit DB Packet Storm
228392 8.2 危険 マカフィー - McAfee Virtual Technician および ePO-MVT における任意のファイルを変更または作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-5879 2013-04-1 16:42 2013-03-15 Show GitHub Exploit DB Packet Storm
228393 7.5 危険 MySQL AB
オラクル
- MySQL で使用される yaSSL におけるバッファオーバーフローの脆弱性性 CWE-119
バッファエラー
CVE-2012-0553 2013-04-1 16:02 2012-09-28 Show GitHub Exploit DB Packet Storm
228394 4.9 警告 ISC, Inc. - ISC DHCP におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-119
バッファエラー
CVE-2013-2494 2013-04-1 15:47 2013-03-26 Show GitHub Exploit DB Packet Storm
228395 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC Smarts Network Configuration Manager の System Management Console における脆弱性 CWE-noinfo
情報不足
CVE-2013-2717 2013-04-1 15:40 2013-03-28 Show GitHub Exploit DB Packet Storm
228396 4.3 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0936 2013-04-1 15:36 2013-03-28 Show GitHub Exploit DB Packet Storm
228397 2.1 注意 Views Project - Drupal 用 Views モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1878 2013-04-1 15:00 2013-03-20 Show GitHub Exploit DB Packet Storm
228398 2.1 注意 Thomas Seidl - Drupal 用 Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2715 2013-04-1 14:58 2013-01-9 Show GitHub Exploit DB Packet Storm
228399 6.4 警告 Chris Desautels - Drupal 用 Node Parameter Control モジュールにおける設定オプションを編集される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1859 2013-04-1 14:57 2013-03-13 Show GitHub Exploit DB Packet Storm
228400 2.1 注意 Devsaran - Drupal 用 Simple Corporate テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1787 2013-04-1 14:56 2013-02-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216711 9.8 CRITICAL
Network
misp misp An issue was discovered in MISP 2.4.128. app/Controller/AttributesController.php has insufficient ACL checks in the attachment downloader. NVD-CWE-noinfo
CVE-2020-15411 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216712 4.4 MEDIUM
Local
iobit malware_fighter IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link. CWE-59
Link Following
CVE-2020-15401 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216713 4.3 MEDIUM
Network
cakefoundation cakephp CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS. CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2020-15400 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216714 7.8 HIGH
Local
hylafax\+_project
ifax
hylafax\+
hylafax_enterprise
HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uuc… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-15397 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216715 7.8 HIGH
Local
hylafax\+_project
ifax
fedoraproject
opensuse
hylafax\+
hylafax_enterprise
fedora
leap
backports_sle
In HylaFAX+ through 7.0.2 and HylaFAX Enterprise, the faxsetup utility calls chown on files in user-owned directories. By winning a race, a local attacker could use this to escalate his privileges to… CWE-362
Race Condition
CVE-2020-15396 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216716 7.8 HIGH
Local
mediaarea
fedoraproject
mediainfo
fedora
In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). CWE-125
Out-of-bounds Read
CVE-2020-15395 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216717 5.5 MEDIUM
Local
linux
debian
opensuse
canonical
linux_kernel
debian_linux
leap
ubuntu_linux
In the Linux kernel 4.4 through 5.7.6, usbtest_disconnect in drivers/usb/misc/usbtest.c has a memory leak, aka CID-28ebeb8db770. CWE-401
 Missing Release of Memory after Effective Lifetime
CVE-2020-15393 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216718 6.5 MEDIUM
Network
uclouvain
debian
oracle
openjpeg
debian_linux
outside_in_technology
jp2/opj_decompress.c in OpenJPEG through 2.3.1 has a use-after-free that can be triggered if there is a mix of valid and invalid files in a directory operated on by the decompressor. Triggering a dou… CWE-416
 Use After Free
CVE-2020-15389 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216719 5.5 MEDIUM
Local
asrock rgb_driver_firmware AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3. NVD-CWE-noinfo
CVE-2020-15368 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm
216720 9.8 CRITICAL
Network
thingssdk wifiscanner wifiscanner.js in thingsSDK WiFi Scanner 1.0.1 allows Code Injection because it can be used with options to overwrite the default executable/binary path and its arguments. An attacker can abuse this … CWE-78
OS Command 
CVE-2020-15362 2024-11-21 14:05 2020-06-30 Show GitHub Exploit DB Packet Storm