Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228781 7.5 危険 Raphael Zschorsch - TYPO3 用 jQuery autocomplete for indexed_search における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4634 2013-06-24 15:26 2013-06-3 Show GitHub Exploit DB Packet Storm
228782 4.3 警告 Catalin Florian Radut - Drupal 用 Zero Point テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1905 2013-06-24 15:24 2013-03-27 Show GitHub Exploit DB Packet Storm
228783 2.1 注意 Jordan Starcher - Drupal 用 CurvyCorners モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1393 2013-06-24 15:20 2013-01-23 Show GitHub Exploit DB Packet Storm
228784 6.9 警告 Fabrice Bellard - Xen で使用される Qemu の qemu guest エージェントにおける特定のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2007 2013-06-21 15:42 2013-04-24 Show GitHub Exploit DB Packet Storm
228785 7.9 危険 シマンテック - Symantec Endpoint Protection Manager および Symantec Endpoint Protection Center におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1612 2013-06-21 15:09 2013-06-18 Show GitHub Exploit DB Packet Storm
228786 4.3 警告 Google - Google Chrome の Flash プラグインにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2866 2013-06-21 15:08 2013-06-18 Show GitHub Exploit DB Packet Storm
228787 3.5 注意 IBM - IBM Sterling Control Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2969 2013-06-21 14:59 2013-06-11 Show GitHub Exploit DB Packet Storm
228788 6.3 警告 IBM - IBM Sterling Control Center におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2968 2013-06-21 14:58 2013-06-11 Show GitHub Exploit DB Packet Storm
228789 7.8 危険 日本電気 - NEC Mobile Handset におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5557 2013-06-21 14:55 2007-10-18 Show GitHub Exploit DB Packet Storm
228790 4.3 警告 Vocera - Vocera Communications Wireless Handset におけるハッシュ化されたパスワードを盗まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2008-1114 2013-06-21 14:39 2008-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
217221 6.1 MEDIUM
Network 		bestsoftinc car_rental_system An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields. CWE-79
Cross-site Scripting 		CVE-2020-15535 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
217222 7.5 HIGH
Network 		wireshark
opensuse
debian 		wireshark
leap
debian_linux 		In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-15466 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217223 7.8 HIGH
Local 		valvesoftware steam_client An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAM… CWE-362
Race Condition 		CVE-2020-15530 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217224 7.8 HIGH
Local 		gog galaxy An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak fil… CWE-667
CWE-732
 Improper Locking
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15529 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217225 7.8 HIGH
Local 		gog galaxy An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity che… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15528 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217226 7.8 HIGH
Local 		python
netapp 		python
snapcenter 		In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native appl… CWE-427
CWE-908
 Uncontrolled Search Path Element
 Use of Uninitialized Resource 		CVE-2020-15523 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
217227 8.8 HIGH
Network 		veeam veeam_availability_suite
veeam_backup_\&_replication 		VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O req… CWE-862
 Missing Authorization 		CVE-2020-15518 2024-11-21 14:05 2020-07-3 Show GitHub Exploit DB Packet Storm
217228 2.3 LOW
Local 		qemu
debian 		qemu
debian_linux 		In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference. CWE-476
 NULL Pointer Dereference 		CVE-2020-15469 2024-11-21 14:05 2020-07-3 Show GitHub Exploit DB Packet Storm
217229 7.5 HIGH
Network 		libraw
fedoraproject
debian 		libraw
fedora
debian_linux 		LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed… CWE-20
 Improper Input Validation  		CVE-2020-15503 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm
217230 7.5 HIGH
Network 		duckduckgo duckduckgo The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which mig… CWE-200
Information Exposure 		CVE-2020-15502 2024-11-21 14:05 2020-07-2 Show GitHub Exploit DB Packet Storm