Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225391 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1971 2013-06-7 18:37 2012-08-28 Show GitHub Exploit DB Packet Storm
225392 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1970 2013-06-7 18:33 2012-08-28 Show GitHub Exploit DB Packet Storm
225393 5 警告 Mozilla Foundation - 複数の Mozilla 製品の QCMS の実装におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1960 2013-06-7 18:30 2012-07-17 Show GitHub Exploit DB Packet Storm
225394 10 危険 アドビシステムズ - Adobe Flash Player および AIR の NetStream クラスにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0773 2013-06-7 17:58 2012-03-28 Show GitHub Exploit DB Packet Storm
225395 10 危険 アドビシステムズ - Windows 上で稼働する Adobe Flash Player および AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0772 2013-06-7 17:56 2012-03-28 Show GitHub Exploit DB Packet Storm
225396 5 警告 アドビシステムズ - Adobe Flash Player における重要な情報を取得される脆弱性 CWE-189
数値処理の問題
CVE-2012-0769 2013-06-7 17:54 2012-03-5 Show GitHub Exploit DB Packet Storm
225397 10 危険 アドビシステムズ - Adobe Flash Player の Matrix3D コンポーネントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-0768 2013-06-7 17:53 2012-03-5 Show GitHub Exploit DB Packet Storm
225398 10 危険 アドビシステムズ
Google
- Google Chrome 上で稼働する Adobe Flash Player におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2012-0725 2013-06-7 16:59 2012-03-28 Show GitHub Exploit DB Packet Storm
225399 4.3 警告 シスコシステムズ - Cisco WebEx Meetings Server の Event Center モジュールにおけるホスト鍵およびイベントパスワードを破られる脆弱性 CWE-287
不適切な認証
CVE-2013-1205 2013-06-7 16:56 2013-06-5 Show GitHub Exploit DB Packet Storm
225400 2.1 注意 アップル - Apple Mac OS X の XNU kernel における KASLR 保護メカニズムを破られる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3952 2013-06-7 15:56 2013-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211071 6.5 MEDIUM
Network
squid-cache
canonical
debian
fedoraproject
opensuse
squid
ubuntu_linux
debian_linux
fedora
leap
An issue was discovered in Squid before 4.13 and 5.x before 5.0.4. Due to incorrect data validation, HTTP Request Smuggling attacks may succeed against HTTP and HTTPS traffic. This leads to cache poi… CWE-444
HTTP Request Smuggling
CVE-2020-15810 2024-11-21 14:06 2020-09-3 Show GitHub Exploit DB Packet Storm
211072 5.5 MEDIUM
Local
arm
fedoraproject
debian
mbed_tls
fedora
debian_linux
A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode … CWE-203
 Information Exposure Through Discrepancy
CVE-2020-16150 2024-11-21 14:06 2020-09-3 Show GitHub Exploit DB Packet Storm
211073 9.0 CRITICAL
Network
redlion n-tron_702-w_firmware
n-tron_702m12-w_firmware
The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perform actions in the context of an attacked user on the N-Tr… - CVE-2020-16210 2024-11-21 14:06 2020-09-2 Show GitHub Exploit DB Packet Storm
211074 8.8 HIGH
Network
redlion n-tron_702-w_firmware
n-tron_702m12-w_firmware
The affected product is vulnerable to cross-site request forgery, which may allow an attacker to modify different configurations of a device by luring an authenticated user to click on a crafted link… - CVE-2020-16208 2024-11-21 14:06 2020-09-2 Show GitHub Exploit DB Packet Storm
211075 9.0 CRITICAL
Network
redlion n-tron_702-w_firmware
n-tron_702m12-w_firmware
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain access to sensitive data on the N-Tron 702-W / 702M12-W (all … - CVE-2020-16206 2024-11-21 14:06 2020-09-2 Show GitHub Exploit DB Packet Storm
211076 9.8 CRITICAL
Network
redlion n-tron_702-w_firmware
n-tron_702m12-w_firmware
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an attacker to execute commands as root on the device on the N-Tron 702-W / 702M12-W (all vers… - CVE-2020-16204 2024-11-21 14:06 2020-09-2 Show GitHub Exploit DB Packet Storm
211077 5.5 MEDIUM
Local
canonical ppp The modprobe child process in the ./debian/patches/load_ppp_generic_if_needed patch file incorrectly handled module loading. A local non-root attacker could exploit the MODPROBE_OPTIONS environment v… CWE-20
 Improper Input Validation 
CVE-2020-15704 2024-11-21 14:06 2020-09-1 Show GitHub Exploit DB Packet Storm
211078 7.5 HIGH
Network
linuxfoundation acrn Missing access control restrictions in the Hypervisor component of the ACRN Project (v2.0 and v1.6.1) allow a malicious entity, with root access in the Service VM userspace, to abuse the PCIe assign/… NVD-CWE-Other
CVE-2020-15687 2024-11-21 14:06 2020-09-1 Show GitHub Exploit DB Packet Storm
211079 3.5 LOW
Adjacent
mercedes-benz comand On Mercedes-Benz C Class AMG Premium Plus c220 BlueTec vehicles, the Bluetooth stack mishandles %x and %c format-string specifiers in a device name in the COMAND infotainment software. CWE-134
Use of Externally-Controlled Format String
CVE-2020-16142 2024-11-21 14:06 2020-08-28 Show GitHub Exploit DB Packet Storm
211080 5.4 MEDIUM
Network
osticket osticket osTicket before 1.14.3 allows XSS because include/staff/banrule.inc.php has an unvalidated echo $info['notes'] call. CWE-79
Cross-site Scripting
CVE-2020-16193 2024-11-21 14:06 2020-08-26 Show GitHub Exploit DB Packet Storm