Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228571 7.8 危険 Arecont Vision - AV1355DN にサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-0139 2013-04-22 16:55 2013-04-15 Show GitHub Exploit DB Packet Storm
228572 4.9 警告 シスコシステムズ - Cisco ASA 上で稼働するクライアントレス SSL VPN におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2013-1199 2013-04-22 16:49 2013-04-17 Show GitHub Exploit DB Packet Storm
228573 7.5 危険 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2013-1453 2013-04-22 16:48 2013-02-4 Show GitHub Exploit DB Packet Storm
228574 5 警告 シスコシステムズ - Cisco ASA デバイスの ISAKMP の実装におけるグループを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2013-1194 2013-04-22 16:46 2013-04-17 Show GitHub Exploit DB Packet Storm
228575 7.5 危険 シスコシステムズ - Cisco Network Admission Control Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-1177 2013-04-22 16:39 2013-04-17 Show GitHub Exploit DB Packet Storm
228576 7.1 危険 シスコシステムズ - Cisco TelePresence MCU デバイスおよび TelePresence Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1176 2013-04-22 16:38 2013-04-17 Show GitHub Exploit DB Packet Storm
228577 4.3 警告 chatelao - PHP Address Book の edit.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1749 2013-04-22 16:32 2013-04-18 Show GitHub Exploit DB Packet Storm
228578 7.5 危険 chatelao - PHP Address Book における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-1748 2013-04-22 16:17 2013-04-18 Show GitHub Exploit DB Packet Storm
228579 10 危険 Rockwell Automation - Rockwell Automation RSLinx Enterprise の LogReceiver.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4715 2013-04-22 16:02 2013-04-5 Show GitHub Exploit DB Packet Storm
228580 7.8 危険 Rockwell Automation - Rockwell Automation FactoryTalk Services Platform の RNADiagnostics.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-4714 2013-04-22 16:01 2013-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
217011 9.8 CRITICAL
Network 		nette
debian 		application
debian_linux 		Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is… CWE-94
Code Injection 		CVE-2020-15227 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
217012 8.8 HIGH
Network 		mozilla firefox
thunderbird
firefox_esr 		If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Serv… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15663 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
217013 5.0 MEDIUM
Network 		toolkit_project toolkit In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows … CWE-77
Command Injection 		CVE-2020-15228 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
217014 7.5 HIGH
Network 		re-desk re\ Re:Desk 2.3 allows insecure file upload. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-15488 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
217015 4.3 MEDIUM
Network 		zohocorp application_control_plus An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) al… NVD-CWE-noinfo
CVE-2020-15595 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
217016 4.3 MEDIUM
Network 		zohocorp application_control_plus An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-15594 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
217017 9.8 CRITICAL
Network 		re-desk re\ Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possib… CWE-89
SQL Injection 		CVE-2020-15487 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
217018 6.5 MEDIUM
Network 		goxmldsig_project
fedoraproject 		goxmldsig
fedora 		In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered fi… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-15216 2024-11-21 14:05 2020-09-30 Show GitHub Exploit DB Packet Storm
217019 6.5 MEDIUM
Network 		google
opensuse 		tensorflow
leap 		In tensorflow-lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, if a TFLite saved model uses the same tensor as both input and output of an operator, then, depending on the operator, we can… CWE-787
 Out-of-bounds Write 		CVE-2020-15210 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm
217020 7.5 HIGH
Network 		google
opensuse 		tensorflow
leap 		In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, by controlling the `fill` argument of tf.strings.as_string, a malicious attacker is able to trigger a format string vulnerability … CWE-134
Use of Externally-Controlled Format String 		CVE-2020-15203 2024-11-21 14:05 2020-09-26 Show GitHub Exploit DB Packet Storm