Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254401 4.3 警告 e107.org - e107 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4920 2012-01-6 15:28 2012-01-4 Show GitHub Exploit DB Packet Storm
254402 4.3 警告 IBM - IBM TFIM および TFIMBG における意図された認証または認証要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1386 2012-01-6 15:26 2011-12-13 Show GitHub Exploit DB Packet Storm
254403 4 警告 IBM - IBM AIX 上の invscout.rte における任意のファイルを削除される脆弱性 CWE-59
リンク解釈の問題
CVE-2011-1384 2012-01-6 15:24 2011-12-2 Show GitHub Exploit DB Packet Storm
254404 4.3 警告 IBM - IBM Web Experience Factory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5048 2012-01-6 15:23 2012-01-3 Show GitHub Exploit DB Packet Storm
254405 4.3 警告 Electric Sheep Fencing - pfSense におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5047 2012-01-6 15:22 2012-01-3 Show GitHub Exploit DB Packet Storm
254406 7.5 危険 Electric Sheep Fencing - pfSense における証明書を作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4197 2012-01-6 15:21 2011-12-20 Show GitHub Exploit DB Packet Storm
254407 4.3 警告 Splunk - Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4778 2012-01-5 16:29 2011-12-12 Show GitHub Exploit DB Packet Storm
254408 9.3 危険 Splunk - Splunk における任意のファイルを読まれる脆弱性 CWE-287
不適切な認証
CVE-2011-4644 2012-01-5 16:28 2012-01-3 Show GitHub Exploit DB Packet Storm
254409 4 警告 Splunk - Splunk におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4643 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
254410 4.6 警告 Splunk - Splunk の Splunk Web 内にある mappy.py における任意のコードを実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-4642 2012-01-5 16:27 2011-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218031 7.2 HIGH
Network
ciphermail webmail_messenger
gateway
An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative… CWE-269
 Improper Privilege Management
CVE-2020-12713 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218032 7.5 HIGH
Network
mitsubishielectric melsec_iq-r00cpu_firmware
melsec_iq-r01cpu_firmware
melsec_iq-r02cpu_firmware
melsec_iq-r04cpu_firmware
melsec_iq-r08cpu_firmware
melsec_iq-r16cpu_firmware
melsec_iq-r32cpu_firmware…
Mitsubishi MELSEC iQ-R Series PLCs with firmware 33 allow attackers to halt the industrial process by sending an unauthenticated crafted packet over the network, because this denial of service attack… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-13238 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218033 7.5 HIGH
Network
hashicorp vault HashiCorp Vault and Vault Enterprise logged proxy environment variables that potentially included sensitive credentials. Fixed in 1.3.6 and 1.4.2. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-13223 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218034 9.8 CRITICAL
Network
hashicorp vault HashiCorp Vault and Vault Enterprise 1.4.0 and 1.4.1, when configured with the GCP Secrets Engine, may incorrectly generate GCP Credentials with the default time-to-live lease duration instead of the… CWE-269
 Improper Privilege Management
CVE-2020-12757 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218035 6.1 MEDIUM
Network
gitlab gitlab A Stored Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code in the blobs API in all previous GitLab CE/EE versions through 13.0.1 CWE-79
Cross-site Scripting
CVE-2020-13271 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218036 8.8 HIGH
Network
gitlab gitlab Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API CWE-862
 Missing Authorization
CVE-2020-13270 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218037 6.1 MEDIUM
Network
gitlab gitlab A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later through 13.0.1 CWE-79
Cross-site Scripting
CVE-2020-13269 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218038 5.3 MEDIUM
Network
gitlab gitlab A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and lat… CWE-200
NVD-CWE-noinfo
Information Exposure
CVE-2020-13268 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218039 6.1 MEDIUM
Network
gitlab gitlab A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in GitLab CE/EE 12.8 and later through 13.0.1 CWE-79
Cross-site Scripting
CVE-2020-13267 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
218040 9.8 CRITICAL
Network
anydesk anydesk AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution. CWE-134
Use of Externally-Controlled Format String
CVE-2020-13160 2024-11-21 14:00 2020-06-10 Show GitHub Exploit DB Packet Storm