Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250361	4.3	警告	株式会社グルコース	-	glucose 2 において任意のスクリプトが実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0313	2012-01-23 12:41	2012-01-23	Show	GitHub Exploit DB Packet Storm

250362	4	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0115	2012-01-23 11:28	2012-01-17	Show	GitHub Exploit DB Packet Storm

250363	4.3	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0496	2012-01-23 11:06	2012-01-17	Show	GitHub Exploit DB Packet Storm

250364	4.9	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0118	2012-01-23 11:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

250365	4.9	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0116	2012-01-23 11:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

250366	5	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2262	2012-01-23 11:03	2012-01-17	Show	GitHub Exploit DB Packet Storm

250367	5.5	警告	オラクル	-	Oracle MySQL の MySQL Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0113	2012-01-23 11:03	2012-01-17	Show	GitHub Exploit DB Packet Storm

250368	2.1	注意	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3570	2012-01-23 10:59	2012-01-17	Show	GitHub Exploit DB Packet Storm

250369	3.3	注意	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3574	2012-01-23 10:58	2012-01-17	Show	GitHub Exploit DB Packet Storm

250370	4	警告	オラクル	-	Oracle Communications Unified における Calendar Server の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3573	2012-01-23 10:58	2012-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210431	7.8	HIGH Local	ivanti	endpoint_manager	Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent) library file, allowing (under certain conditions) one to gain code execution (…	CWE-427 Uncontrolled Search Path Element	CVE-2020-13771	2024-11-21 14:01	2020-11-13	Show	GitHub Exploit DB Packet Storm

210432	7.8	HIGH Local	ivanti	endpoint_manager	Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive security attributes; as these services run as user ‘NT AUTHORITY\SYSTEM’, the …	CWE-276 Incorrect Default Permissions	CVE-2020-13770	2024-11-21 14:01	2020-11-13	Show	GitHub Exploit DB Packet Storm

210433	7.8	HIGH Local	moxa	mxview	An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code …	CWE-276 Incorrect Default Permissions	CVE-2020-13537	2024-11-21 14:01	2020-11-6	Show	GitHub Exploit DB Packet Storm

210434	7.8	HIGH Local	moxa	mxview	An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code …	CWE-276 Incorrect Default Permissions	CVE-2020-13536	2024-11-21 14:01	2020-11-6	Show	GitHub Exploit DB Packet Storm

210435	8.8	HIGH Network	telerik	fiddler	Telerik Fiddler through 5.0.20202.18177 allows attackers to execute arbitrary programs via a hostname with a trailing space character, followed by --utility-and-browser --utility-cmd-prefix= and the …	NVD-CWE-noinfo	CVE-2020-13661	2024-11-21 14:01	2020-11-6	Show	GitHub Exploit DB Packet Storm

210436	7.5	HIGH Network	gitlab	runner	An issue has been discovered in GitLab Runner affecting all versions starting from 13.4.0 before 13.4.2, all versions starting from 13.3.0 before 13.3.7, all versions starting from 13.2.0 before 13.2…	NVD-CWE-noinfo	CVE-2020-13327	2024-11-21 14:01	2020-10-23	Show	GitHub Exploit DB Packet Storm

210437	8.8	HIGH Network	rconfig	rconfig	rConfig 3.9.4 and earlier allows authenticated code execution (of system commands) by sending a forged GET request to lib/ajaxHandlers/ajaxAddTemplate.php or lib/ajaxHandlers/ajaxEditTemplate.php.	CWE-78 OS Command	CVE-2020-13778	2024-11-21 14:01	2020-10-19	Show	GitHub Exploit DB Packet Storm

210438	4.9	MEDIUM Network	gitlab	gitlab	An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Insufficient permission check allows attacker with developer role to perform various deletions.	CWE-843 Type Confusion	CVE-2020-13341	2024-11-21 14:01	2020-10-12	Show	GitHub Exploit DB Packet Storm

210439	4.6	MEDIUM Physics	oneplus	app_locker	OnePlus App Locker through 2020-10-06 allows physically proximate attackers to use Google Assistant to bypass an authorization check in order to send an SMS message when the SMS application is locked.	CWE-862 Missing Authorization	CVE-2020-13626	2024-11-21 14:01	2020-10-9	Show	GitHub Exploit DB Packet Storm

210440	4.4	MEDIUM Local	gitlab	gitlab	An issue has been discovered in GitLab affecting all versions prior to 13.2.10, 13.3.7 and 13.4.2. Sessions keys are stored in plain-text in Redis which allows attacker with Redis access to authentic…	CWE-522 Insufficiently Protected Credentials	CVE-2020-13344	2024-11-21 14:01	2020-10-8	Show	GitHub Exploit DB Packet Storm