Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249511	6.8	警告	The phpMyAdmin Project	-	phpMyAdmin の sql.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2643	2012-03-27 18:43	2011-07-23	Show	GitHub Exploit DB Packet Storm

249512	2.6	注意	The phpMyAdmin Project	-	phpMyAdmin の table Print view 実装におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2642	2012-03-27 18:43	2011-07-23	Show	GitHub Exploit DB Packet Storm

249513	6.4	警告	ヒューレット・パッカード	-	HP OpenView Performance Agent および Operations Agent の ovbbccb.exe における任意のファイルを削除される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2608	2012-03-27 18:43	2011-07-1	Show	GitHub Exploit DB Packet Storm

249514	4.3	警告	IBM	-	IBM RTC におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2607	2012-03-27 18:43	2011-05-27	Show	GitHub Exploit DB Packet Storm

249515	4.3	警告	IBM	-	IBM RTC の Web UI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2606	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

249516	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および Thunderbird の nsCookieService::SetCookieStringInternal 関数における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-2605	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

249517	5	警告	The Prosody Team	-	Prosody の json.decode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2532	2012-03-27 18:43	2011-06-3	Show	GitHub Exploit DB Packet Storm

249518	7.1	危険	インテル	-	Intel G41 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2604	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

249519	7.1	危険	NVIDIA	-	NVIDIA 9400M ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2603	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

249520	7.1	危険	NVIDIA	-	NVIDIA Geforce 310 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2602	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213731	3.3	LOW Local	softperfect	ram_disk	An exploitable information disclosure vulnerability exists in SoftPerfect’s RAM Disk 4.1 spvve.sys driver. A specially crafted I/O request packet (IRP) can cause the disclosure of sensitive informati…	CWE-862 Missing Authorization	CVE-2020-13523	2024-11-21 14:01	2020-08-5	Show	GitHub Exploit DB Packet Storm

213732	6.1	MEDIUM Network	extremenetworks	extreme_management_center	Extreme Management Center 8.4.1.24 allows unauthenticated reflected XSS via a parameter in a GET request.	CWE-79 Cross-site Scripting	CVE-2020-13820	2024-11-21 14:01	2020-08-4	Show	GitHub Exploit DB Packet Storm

213733	8.8	HIGH Network	teamviewer	teamviewer	TeamViewer Desktop for Windows before 15.8.3 does not properly quote its custom URI handlers. A malicious website could launch TeamViewer with arbitrary parameters, as demonstrated by a teamviewer10:…	CWE-88 Argument Injection	CVE-2020-13699	2024-11-21 14:01	2020-07-30	Show	GitHub Exploit DB Packet Storm

213734	7.5	HIGH Network	microweber	microweber	userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.	CWE-306 Missing Authentication for Critical Function	CVE-2020-13405	2024-11-21 14:01	2020-07-17	Show	GitHub Exploit DB Packet Storm

213735	4.3	MEDIUM Network	linuxfoundation	harbor	Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's intranet.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-13788	2024-11-21 14:01	2020-07-16	Show	GitHub Exploit DB Packet Storm

213736	7.5	HIGH Network	sylabs	singularity	Sylabs Singularity 3.0 through 3.5 lacks support for an Integrity Check. Singularity's sign and verify commands do not sign metadata found in the global header or data object descriptors of a SIF fil…	CWE-354 Improper Validation of Integrity Check Value	CVE-2020-13847	2024-11-21 14:01	2020-07-15	Show	GitHub Exploit DB Packet Storm

213737	7.5	HIGH Network	sylabs	singularity	Sylabs Singularity 3.5.0 through 3.5.3 fails to report an error in a Status Code.	NVD-CWE-Other	CVE-2020-13846	2024-11-21 14:01	2020-07-15	Show	GitHub Exploit DB Packet Storm

213738	7.5	HIGH Network	sylabs	singularity	Sylabs Singularity 3.0 through 3.5 has Improper Validation of an Integrity Check Value. Image integrity is not validated when an ECL policy is enforced. The fingerprint required by the ECL is compare…	CWE-347 CWE-354 Improper Verification of Cryptographic Signature Improper Validation of Integrity Check Value	CVE-2020-13845	2024-11-21 14:01	2020-07-15	Show	GitHub Exploit DB Packet Storm

213739	10.0	CRITICAL Network	wpewebkit webkitgtk fedoraproject debian canonical opensuse	wpe_webkit webkitgtk fedora debian_linux ubuntu_linux leap	The bubblewrap sandbox of WebKitGTK and WPE WebKit, prior to 2.28.3, failed to properly block access to CLONE_NEWUSER and the TIOCSTI ioctl. CLONE_NEWUSER could potentially be used to confuse xdg-des…	CWE-20 Improper Input Validation	CVE-2020-13753	2024-11-21 14:01	2020-07-14	Show	GitHub Exploit DB Packet Storm

213740	6.1	MEDIUM Network	synacor	zimbra_collaboration_suite	An XSS vulnerability exists in the Webmail component of Zimbra Collaboration Suite before 8.8.15 Patch 11. It allows an attacker to inject executable JavaScript into the account name of a user's prof…	CWE-79 Cross-site Scripting	CVE-2020-13653	2024-11-21 14:01	2020-07-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed