Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258111	4.3	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	Apache の mod_proxy_ftp モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-2939	2010-11-4 15:35	2008-08-6	Show	GitHub Exploit DB Packet Storm

258112	1.9	注意	オラクル	-	Oracle Solaris および OpenSolaris における USB の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3542	2010-11-4 15:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

258113	2.4	注意	オラクル	-	Oracle Solaris および OpenSolaris における Device Drivers の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3513	2010-11-4 15:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

258114	3.2	注意	オラクル	-	Oracle Solaris における Solaris Zones の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3508	2010-11-4 15:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

258115	3.5	注意	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3512	2010-11-2 15:53	2010-10-12	Show	GitHub Exploit DB Packet Storm

258116	3.6	注意	オラクル	-	Oracle Solaris および OpenSolaris における SCSI enclosure services デバイスドライバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3576	2010-11-2 15:53	2010-10-12	Show	GitHub Exploit DB Packet Storm

258117	4	警告	オラクル	-	Oracle Solaris および OpenSolaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3540	2010-11-2 15:53	2010-10-12	Show	GitHub Exploit DB Packet Storm

258118	4	警告	オラクル	-	Oracle Solaris および OpenSolaris における InfiniBand の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-3516	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

258119	4	警告	オラクル	-	Oracle Solaris および OpenSolaris の Solaris コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3515	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

258120	4.3	警告	オラクル	-	Oracle Sun Products Suite の Oracle iPlanet Web Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3514	2010-11-2 15:52	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218481	7.8	HIGH Local	win911	win-911	An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via WIN-911 Account Change Utility. Depending on the …	CWE-276 Incorrect Default Permissions	CVE-2020-13540	2024-11-21 14:01	2021-01-6	Show	GitHub Exploit DB Packet Storm

218482	7.8	HIGH Local	win911	win-911	An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on th…	CWE-276 Incorrect Default Permissions	CVE-2020-13539	2024-11-21 14:01	2021-01-6	Show	GitHub Exploit DB Packet Storm

218483	7.5	HIGH Network	xwiki	xwiki	XWiki Platform before 12.8 mishandles escaping in the property displayer.	CWE-116 Improper Encoding or Escaping of Output	CVE-2020-13654	2024-11-21 14:01	2020-12-31	Show	GitHub Exploit DB Packet Storm

218484	4.8	MEDIUM Network	nchsoftware	express_invoice	NCH Express Invoice 8.06 to 8.24 is vulnerable to Reflected XSS in the Quotes List module.	CWE-79 Cross-site Scripting	CVE-2020-13476	2024-11-21 14:01	2020-12-29	Show	GitHub Exploit DB Packet Storm

218485	6.5	MEDIUM Network	nchsoftware	express_accounts	In NCH Express Accounts 8.24 and earlier, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as Add/Edit users.	CWE-425 Direct Request ('Forced Browsing')	CVE-2020-13474	2024-11-21 14:01	2020-12-29	Show	GitHub Exploit DB Packet Storm

218486	5.5	MEDIUM Local	nchsoftware	express_accounts	NCH Express Accounts 8.24 and earlier allows local users to discover the cleartext password by reading the configuration file.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-13473	2024-11-21 14:01	2020-12-29	Show	GitHub Exploit DB Packet Storm

218487	8.8	HIGH Network	foxitsoftware	foxit_reader	A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, r…	CWE-787 CWE-843 Out-of-bounds Write Type Confusion	CVE-2020-13547	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

218488	8.8	HIGH Network	foxitsoftware	foxit_reader	A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger the reuse of previously free memory w…	CWE-416 Use After Free	CVE-2020-13570	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

218489	8.8	HIGH Network	foxitsoftware	foxit_reader	A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory…	CWE-416 Use After Free	CVE-2020-13560	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

218490	8.8	HIGH Network	foxitsoftware	foxit_reader	A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory…	CWE-416 Use After Free	CVE-2020-13557	2024-11-21 14:01	2020-12-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed