Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250501 6.4 警告 Piwik - Piwik の Piwik_Common::getIP 関数における位置情報取得とロギング機能を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0398 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
250502 9.3 危険 マイクロソフト - Windows XP の Microsoft Internet Explorer における不正な GUI 表示を誘発される脆弱性 CWE-Other
その他 		CVE-2011-0347 2012-03-27 18:42 2011-01-7 Show GitHub Exploit DB Packet Storm
250503 3.3 注意 Alcatel-Lucent - Alcatel-Lucent OmniVista の NMS サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-0345 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
250504 5.8 警告 Alcatel-Lucent - Alcatel-Lucent OmniPCX Enterprise の CGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0344 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
250505 6.9 警告 balabit - Balabit syslog-ng におけるログファイルを読み書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0343 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
250506 10 危険 Schneider Electric - InduSoft Web Studio の InduSoft ISSymbol ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0342 2012-03-27 18:42 2011-09-2 Show GitHub Exploit DB Packet Storm
250507 9.3 危険 Artifex Software - MuPDF プラグインの pdfmoz_onmouse 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0341 2012-03-27 18:42 2011-05-13 Show GitHub Exploit DB Packet Storm
250508 9.3 危険 Foxit Software Inc - Foxit Reader における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0332 2012-03-27 18:42 2011-02-25 Show GitHub Exploit DB Packet Storm
250509 9.3 危険 Honeywell International Inc. - Honeywell ScanServer ActiveX コントロールの addOSPLext メソッドにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0331 2012-03-27 18:42 2011-03-22 Show GitHub Exploit DB Packet Storm
250510 5 警告 デル - DellSystemLite.ocx の Dell DellSystemLite.Scanner ActiveX コントロールにおける任意の WQL 文を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0330 2012-03-27 18:42 2011-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214541 6.8 MEDIUM
Physics 		westerndigital
linaro 		inand_cl_em132_firmware
inand_ix_em132_firmware
inand_ix_em132_xi_firmware
op-tee 		Western Digital has identified a security vulnerability in the Replay Protected Memory Block (RPMB) protocol as specified in multiple standards for storage device interfaces, including all versions o… CWE-294
Authentication Bypass by Capture-replay  		CVE-2020-13799 2024-11-21 14:01 2020-11-19 Show GitHub Exploit DB Packet Storm
214542 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic ba… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13349 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
214543 5.7 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected version… NVD-CWE-noinfo
CVE-2020-13348 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
214544 6.5 MEDIUM
Network 		gitlab gitlab Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on projects visible to the attacker. Affect… CWE-276
Incorrect Default Permissions  		CVE-2020-13351 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
214545 4.3 MEDIUM
Network 		gitlab gitlab CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.… CWE-352
 Origin Validation Error 		CVE-2020-13350 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
214546 5.5 MEDIUM
Local 		gitlab gitlab A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13… NVD-CWE-noinfo
CVE-2020-13358 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
214547 4.3 MEDIUM
Network 		gitlab gitlab A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain user supplied value… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13354 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
214548 3.2 LOW
Local 		gitlab gitaly When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. CWE-613
 Insufficient Session Expiration 		CVE-2020-13353 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
214549 5.3 MEDIUM
Network 		gitlab gitlab Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.… NVD-CWE-noinfo
CVE-2020-13352 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
214550 5.4 MEDIUM
Network 		ivanti endpoint_manager Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm_splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm_splitcollapse.aspx, /LDMS/alert_log.aspx, /LDMS/ServerList.aspx, /LDMS/frm_coremain… CWE-79
Cross-site Scripting 		CVE-2020-13773 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm