Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 4:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229591	4.3	警告	レッドハット	-	JBoss Enterprise Portal Platform の GateIn Portal におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5531	2013-01-22 14:59	2013-01-7	Show	GitHub Exploit DB Packet Storm

229592	5	警告	レッドハット SquirrelMail Project	-	Red Hat Enterprise Linux で使用される SquirrelMail におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2124	2013-01-22 14:59	2013-01-8	Show	GitHub Exploit DB Packet Storm

229593	9.3	危険	DELL EMC (旧 EMC Corporation)	-	EMC NetWorker の nsrindexd におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4607	2013-01-22 14:58	2013-01-17	Show	GitHub Exploit DB Packet Storm

229594	3.5	注意	IBM	-	IBM Tivoli Federated Identity Manager におけるパスワードを破られる脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-3310	2013-01-22 14:57	2013-01-17	Show	GitHub Exploit DB Packet Storm

229595	3.5	注意	Samba Project	-	Samba における LDAP ディレクトリオブジェクトの変更上の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0172	2013-01-22 14:56	2013-01-17	Show	GitHub Exploit DB Packet Storm

229596	4.6	警告	シスコシステムズ	-	Windows 上の Cisco VPN Client におけるサービス運用妨害 (カーネルフォルトおよびシステムクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-5429	2013-01-22 14:41	2013-01-12	Show	GitHub Exploit DB Packet Storm

229597	5	警告	SpecView	-	SpecView の Web サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-5972	2013-01-22 14:28	2013-01-11	Show	GitHub Exploit DB Packet Storm

229598	4.3	警告	General Electric Company	-	GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-4689	2013-01-22 14:18	2013-01-8	Show	GitHub Exploit DB Packet Storm

229599	6.8	警告	シスコシステムズ	-	Cisco WebEx Training Center におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-1109	2013-01-22 14:08	2013-01-14	Show	GitHub Exploit DB Packet Storm

229600	4.3	警告	シスコシステムズ	-	Cisco WebEx Social におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6397	2013-01-22 14:02	2013-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220811	9.8	CRITICAL Network	psd-tools_project	psd-tools	An issue was discovered in psd-tools before 1.9.4. The Cython implementation of RLE decoding did not check for malicious data.	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-10571	2024-11-21 13:55	2020-03-15	Show	GitHub Exploit DB Packet Storm

220812	8.8	HIGH Network	onthegosystems	sitepress-multilingual-cms	The sitepress-multilingual-cms (WPML) plugin before 4.3.7-b.2 for WordPress has CSRF due to a loose comparison. This leads to remote code execution in includes/class-wp-installer.php via a series of …	CWE-352 Origin Validation Error	CVE-2020-10568	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220813	9.8	CRITICAL Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the ajax_calls.php file in the save_img action in the name parameter, there is no validation of what kind of extension is sent. Th…	CWE-20 Improper Input Validation	CVE-2020-10567	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220814	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, mishandles font loading by a guest through a grub2.cfg file, leading to a buffer overflow.	CWE-120 Classic Buffer Overflow	CVE-2020-10566	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220815	7.8	HIGH Local	freebsd	freebsd	grub2-bhyve, as used in FreeBSD bhyve before revision 525916 2020-02-12, does not validate the address provided as part of a memrw command (read_* or write_*) by a guest through a grub2.cfg file. Thi…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-10565	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220816	9.8	CRITICAL Network	iptanus	wordpress_file_upload	An issue was discovered in the File Upload plugin before 4.13.0 for WordPress. A directory traversal can lead to remote code execution by uploading a crafted txt file into the lib directory, because …	CWE-22 Path Traversal	CVE-2020-10564	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220817	9.8	CRITICAL Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. frmcontactlist.php mishandles a SQL query.	CWE-89 SQL Injection	CVE-2020-10563	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220818	7.2	HIGH Network	devome	grr	An issue was discovered in DEVOME GRR before 3.4.1c. admin_edit_room.php mishandles file uploads.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10562	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220819	6.1	MEDIUM Network	primetek	primefaces	An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an input field whose data is later u…	CWE-79 Cross-site Scripting	CVE-2020-10544	2024-11-21 13:55	2020-03-14	Show	GitHub Exploit DB Packet Storm

220820	9.8	CRITICAL Network	zohocorp	manageengine_opmanager	Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.	NVD-CWE-noinfo	CVE-2020-10541	2024-11-21 13:55	2020-03-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed