Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249921	6.4	警告	シックス・アパート株式会社	-	Movable Type におけるセッションハイジャックが可能な脆弱性	CWE-Other その他	CVE-2012-0320	2012-02-23 12:04	2012-02-23	Show	GitHub Exploit DB Packet Storm

249922	6.5	警告	シックス・アパート株式会社	-	Movable Type における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-0319	2012-02-23 12:04	2012-02-23	Show	GitHub Exploit DB Packet Storm

249923	2.6	注意	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0318	2012-02-23 12:03	2012-02-23	Show	GitHub Exploit DB Packet Storm

249924	4	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0317	2012-02-23 12:03	2012-02-23	Show	GitHub Exploit DB Packet Storm

249925	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1235	2012-02-23 11:47	2012-02-21	Show	GitHub Exploit DB Packet Storm

249926	6.5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1234	2012-02-23 11:46	2012-02-21	Show	GitHub Exploit DB Packet Storm

249927	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0244	2012-02-23 11:41	2012-02-21	Show	GitHub Exploit DB Packet Storm

249928	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0243	2012-02-23 11:40	2012-02-21	Show	GitHub Exploit DB Packet Storm

249929	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2012-0242	2012-02-23 11:37	2012-02-21	Show	GitHub Exploit DB Packet Storm

249930	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0241	2012-02-23 11:36	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210851	9.8	CRITICAL Network	openfind	mailgates mailaudit	Openfind MailGates contains a Command Injection flaw, when receiving email with specific strings, malicious code in the mail attachment will be triggered and gain unauthorized access to system files.	CWE-77 Command Injection	CVE-2020-12782	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

210852	9.8	CRITICAL Network	articatech	artica_proxy	Artica Proxy before 4.30.000000 Community Edition allows OS command injection via the Netbios name, Server domain name, dhclient_mac, Hostname, or Alias field. NOTE: this may overlap CVE-2020-10818.	CWE-78 OS Command	CVE-2020-13159	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

210853	7.5	HIGH Network	articatech	artica_proxy	Artica Proxy before 4.30.000000 Community Edition allows Directory Traversal via the fw.progrss.details.php popup parameter.	CWE-22 Path Traversal	CVE-2020-13158	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

210854	8.6	HIGH Local	gitlab	gitlab-vscode-extension	Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system	CWE-427 Uncontrolled Search Path Element	CVE-2020-13279	2024-11-21 14:00	2020-06-23	Show	GitHub Exploit DB Packet Storm

210855	5.3	MEDIUM Network	gitlab	gitlab	Kubernetes cluster token disclosure in GitLab CE/EE 10.3 and later through 13.0.1 allows other group maintainers to view Kubernetes cluster token	CWE-200 Information Exposure	CVE-2020-13264	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

210856	8.8	HIGH Network	gitlab	gitlab	An authorization issue relating to project maintainer impersonation was identified in GitLab EE 9.5 and later through 13.0.1 that could allow unauthorized users to impersonate as a maintainer to perf…	CWE-863 Incorrect Authorization	CVE-2020-13263	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

210857	2.7	LOW Network	gitlab	gitlab	Amazon EKS credentials disclosure in GitLab CE/EE 12.6 and later through 13.0.1 allows other administrators to view Amazon EKS credentials via HTML source code	CWE-200 Information Exposure	CVE-2020-13261	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

210858	4.3	MEDIUM Network	gitlab	gitlab	User is allowed to set an email as a notification email even without verifying the new email in all previous GitLab CE/EE versions through 13.0.1	CWE-862 Missing Authorization	CVE-2020-13276	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

210859	8.1	HIGH Network	gitlab	gitlab	A user with an unverified email address could request an access to domain restricted groups in GitLab EE 12.2 and later through 13.0.1	NVD-CWE-noinfo	CVE-2020-13275	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm

210860	7.5	HIGH Network	gitlab	gitlab	A security issue allowed achieving Denial of Service attacks through memory exhaustion by uploading malicious artifacts in all previous GitLab versions through 13.0.1	NVD-CWE-noinfo	CVE-2020-13274	2024-11-21 14:00	2020-06-20	Show	GitHub Exploit DB Packet Storm