Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
244291 5 警告 Martin Nagy - bind-dyndb-ldap の src/ldap_convert.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3429 2012-08-9 16:43 2012-08-1 Show GitHub Exploit DB Packet Storm
244292 7.5 危険 レッドハット - IcedTea-Web プラグインにおける重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2012-3423 2012-08-9 16:39 2012-06-1 Show GitHub Exploit DB Packet Storm
244293 4.4 警告 GNU Project - GNU Automake における任意のコードを実行される脆弱性 CWE-264
CWE-362
CVE-2012-3386 2012-08-9 16:36 2012-07-9 Show GitHub Exploit DB Packet Storm
244294 10 危険 Ubisoft - Ubisoft Uplay PC 用 Web ブラウザのプラグインにおける任意のプログラムを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2012-4177 2012-08-9 16:27 2012-07-30 Show GitHub Exploit DB Packet Storm
244295 3.6 注意 eXtplorer - eXtplorer における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3454 2012-08-9 16:26 2012-08-7 Show GitHub Exploit DB Packet Storm
244296 3.6 注意 Debian - logol における任意のファイルを削除または上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3453 2012-08-9 16:22 2012-08-7 Show GitHub Exploit DB Packet Storm
244297 3.3 注意 GNOME Project - gnome-screensaver における無人のワークステーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3452 2012-08-9 16:20 2012-08-7 Show GitHub Exploit DB Packet Storm
244298 3.6 注意 Open vSwitch - Open vSwitch における任意のファイルを削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3449 2012-08-9 16:12 2012-08-7 Show GitHub Exploit DB Packet Storm
244299 4.3 警告 KDE project - KDE PIM における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-16
環境設定 		CVE-2012-3413 2012-08-9 16:10 2012-08-7 Show GitHub Exploit DB Packet Storm
244300 4.3 警告 ヒューレット・パッカード - HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2022 2012-08-9 15:45 2012-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218281 7.5 HIGH
Network 		naviwebs navigate_cms An issue was discovered in Navigate CMS 2.9 r1433. Sessions, as well as associated information such as CSRF tokens, are stored in cleartext files in the directory /private/sessions. An unauthenticate… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-14017 2024-11-21 14:02 2020-06-25 Show GitHub Exploit DB Packet Storm
218282 5.3 MEDIUM
Network 		naviwebs navigate_cms An issue was discovered in Navigate CMS 2.9 r1433. The forgot-password feature allows users to reset their passwords by using either their username or the email address associated with their account.… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2020-14016 2024-11-21 14:02 2020-06-25 Show GitHub Exploit DB Packet Storm
218283 7.5 HIGH
Network 		naviwebs navigate_cms An issue was discovered in Navigate CMS 2.9 r1433. When performing a password reset, a user is emailed an activation code that allows them to reset their password. There is, however, a flaw when no a… CWE-640
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2020-14015 2024-11-21 14:02 2020-06-25 Show GitHub Exploit DB Packet Storm
218284 5.4 MEDIUM
Network 		naviwebs navigate_cms An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to re… CWE-79
Cross-site Scripting 		CVE-2020-14014 2024-11-21 14:02 2020-06-25 Show GitHub Exploit DB Packet Storm
218285 5.4 MEDIUM
Network 		solarwinds orion_network_performance_monitor
orion_web_performance_monitor 		Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. CWE-79
Cross-site Scripting 		CVE-2020-14007 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
218286 5.4 MEDIUM
Network 		solarwinds orion_network_performance_monitor
orion_web_performance_monitor 		Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. CWE-79
Cross-site Scripting 		CVE-2020-14006 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
218287 8.8 HIGH
Network 		solarwinds orion_network_performance_monitor
orion_web_performance_monitor 		Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event. NVD-CWE-noinfo
CVE-2020-14005 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
218288 5.4 MEDIUM
Network 		paessler prtg_network_monitor XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScri… CWE-79
Cross-site Scripting 		CVE-2020-14073 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
218289 7.5 HIGH
Network 		rakuten viber Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication req… CWE-88
Argument Injection 		CVE-2020-14049 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
218290 8.8 HIGH
Network 		kordil_edms_project kordil_edms documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-13887 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm