Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249211 7.6 危険 マイクロソフト - 複数の Windows 製品で使用される Microsoft Windows Fax Services Cover Page Editor の CDrawPoly::Serialize 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4701 2012-04-3 10:57 2011-01-20 Show GitHub Exploit DB Packet Storm
249212 7.8 危険 マイクロソフト - 複数の Windows 製品の ND プロトコル実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4669 2012-04-3 10:57 2011-01-7 Show GitHub Exploit DB Packet Storm
249213 9.3 危険 マイクロソフト - 複数の Windows 製品の DAO ライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-4182 2012-04-3 10:57 2010-11-4 Show GitHub Exploit DB Packet Storm
249214 7.2 危険 マイクロソフト - 複数の Windows 製品の CreateDIBPalette 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2739 2012-04-3 10:57 2010-09-7 Show GitHub Exploit DB Packet Storm
249215 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の SIP 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1315 2012-04-2 15:50 2012-03-28 Show GitHub Exploit DB Packet Storm
249216 7.8 危険 シスコシステムズ - Cisco IOS の WAAS Express 機能におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1314 2012-04-2 15:48 2012-03-28 Show GitHub Exploit DB Packet Storm
249217 7.1 危険 シスコシステムズ - Cisco IOS の MACE 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1312 2012-04-2 15:46 2012-03-28 Show GitHub Exploit DB Packet Storm
249218 7.8 危険 シスコシステムズ - Cisco IOS の RSVP 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1311 2012-04-2 15:45 2012-03-28 Show GitHub Exploit DB Packet Storm
249219 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall におけるサービス運用妨害 (メモリ消費またはデバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-1310 2012-04-2 15:42 2012-03-28 Show GitHub Exploit DB Packet Storm
249220 7.8 危険 シスコシステムズ - Cisco IOS の Zone-Based Firewall の H.323 検査機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0388 2012-04-2 15:41 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213401 8.8 HIGH
Network 		ibi webfocus_business_intelligence WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of a… CWE-352
 Origin Validation Error 		CVE-2020-14203 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm
213402 6.1 MEDIUM
Network 		ibi webfocus_business_intelligence WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters. CWE-79
Cross-site Scripting 		CVE-2020-14202 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm
213403 6.5 MEDIUM
Network 		strapi strapi Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafte… CWE-20
 Improper Input Validation  		CVE-2020-13961 2024-11-21 14:02 2020-06-20 Show GitHub Exploit DB Packet Storm
213404 7.8 HIGH
Local 		rtslib-fb_project rtslib-fb Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. CWE-276
Incorrect Default Permissions  		CVE-2020-14019 2024-11-21 14:02 2020-06-19 Show GitHub Exploit DB Packet Storm
213405 4.2 MEDIUM
Local 		cisofy
fedoraproject 		lynis
fedora 		CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed l… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-13882 2024-11-21 14:02 2020-06-19 Show GitHub Exploit DB Packet Storm
213406 8.1 HIGH
Adjacent 		abus secvest_wireless_control_fube50001_firmware The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easier for an… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-14157 2024-11-21 14:02 2020-06-18 Show GitHub Exploit DB Packet Storm
213407 7.5 HIGH
Network 		golang
fedoraproject 		text
fedora 		The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An a… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-14040 2024-11-21 14:02 2020-06-18 Show GitHub Exploit DB Packet Storm
213408 7.2 HIGH
Network 		cacti
fedoraproject 		cacti
fedora 		A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries. CWE-89
SQL Injection 		CVE-2020-14295 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
213409 6.5 MEDIUM
Network 		zammad zammad Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register a new account that will have access to all ticke… CWE-863
 Incorrect Authorization 		CVE-2020-14214 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
213410 5.4 MEDIUM
Network 		zammad zammad In Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g., read internal data, split, or merge). CWE-862
 Missing Authorization 		CVE-2020-14213 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm