Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250661	7.5	危険	MH Products	-	Immo Makler の news.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4721	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

250662	7.5	危険	Joomla! Jextensions	-	Joomla! の JExtensions JE Auto (com_jeauto) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4720	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

250663	7.5	危険	fxwebdesign	-	Joomla! の JRadio (com_jradio) コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4719	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

250664	4.3	警告	lyften	-	Joomla! 用の Lyftenbloggie コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4718	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

250665	6.5	警告	Novell	-	Novell GroupWise の IMAP サーバコンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4717	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250666	4.3	警告	Novell	-	Novell GroupWise の WebPublisher コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4716	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250667	5	警告	Novell	-	Novell GroupWise の WebAccess Agent におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4715	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250668	10	危険	Novell	-	Novell GroupWise におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4714	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250669	10	危険	Novell	-	Novell GroupWise の gwia.exe における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2010-4713	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250670	10	危険	Novell	-	Novell GroupWise の gwia.exe におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4712	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214921	6.1	MEDIUM Network	teradici	pcoip_management_console	Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.	CWE-79 Cross-site Scripting	CVE-2020-13183	2024-11-21 14:00	2020-08-18	Show	GitHub Exploit DB Packet Storm

214922	8.8	HIGH Network	noviflow	noviware	The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" comma…	CWE-78 OS Command	CVE-2020-13122	2024-11-21 14:00	2020-08-18	Show	GitHub Exploit DB Packet Storm

214923	4.3	MEDIUM Network	gitlab	gitlab	For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-13286	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214924	6.5	MEDIUM Network	gitlab	gitlab	For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature	CWE-400 Uncontrolled Resource Consumption	CVE-2020-13281	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214925	5.4	MEDIUM Network	gitlab	gitlab	For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip.	CWE-79 Cross-site Scripting	CVE-2020-13285	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214926	5.4	MEDIUM Network	gitlab	gitlab	For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title.	CWE-79 Cross-site Scripting	CVE-2020-13283	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214927	3.5	LOW Network	gitlab	gitlab	For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access.	CWE-281 Improper Preservation of Permissions	CVE-2020-13282	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214928	6.5	MEDIUM Network	gitlab	gitlab	For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-13280	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214929	7.5	HIGH Network	dovecot debian canonical fedoraproject	dovecot debian_linux ubuntu_linux fedora	In Dovecot before 2.3.11.3, sending a specially formatted RPA request will crash the auth service because a length of zero is mishandled.	CWE-125 Out-of-bounds Read	CVE-2020-12674	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

214930	7.5	HIGH Network	dovecot debian canonical fedoraproject	dovecot debian_linux ubuntu_linux fedora	In Dovecot before 2.3.11.3, sending a specially formatted NTLM request will crash the auth service because of an out-of-bounds read.	CWE-125 Out-of-bounds Read	CVE-2020-12673	2024-11-21 14:00	2020-08-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed