Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225431 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3684 2013-02-7 17:53 2012-09-13 Show GitHub Exploit DB Packet Storm
225432 10 危険 シスコシステムズ - Cisco Unified IP Phone 7900 シリーズにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5445 2013-02-7 17:40 2012-12-28 Show GitHub Exploit DB Packet Storm
225433 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-0770 2013-02-7 17:40 2013-01-8 Show GitHub Exploit DB Packet Storm
225434 6.8 警告 アップル - Apple iOS の ImageIO におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3726 2013-02-7 17:27 2012-09-20 Show GitHub Exploit DB Packet Storm
225435 3.3 注意 アップル - Apple iOS の DHCP コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-3725 2013-02-7 17:20 2012-09-20 Show GitHub Exploit DB Packet Storm
225436 6.8 警告 アップル - 複数の Apple 製品で使用される CoreMedia におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-3722 2013-02-7 17:11 2012-09-20 Show GitHub Exploit DB Packet Storm
225437 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-3679 2013-02-7 16:51 2012-07-25 Show GitHub Exploit DB Packet Storm
225438 4 警告 シスコシステムズ - Cisco Webex Social におけるファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1107 2013-02-7 16:33 2013-01-13 Show GitHub Exploit DB Packet Storm
225439 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3285 2013-02-7 16:31 2013-02-5 Show GitHub Exploit DB Packet Storm
225440 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-3284 2013-02-7 16:31 2013-02-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199511 6.1 MEDIUM
Network 		sixapart movable_type Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable Type 6.5.2 and earlier (Movable Type 6.5), Movable Type Advanced 7 r.4603 and ea… CWE-79
Cross-site Scripting 		CVE-2020-5528 2024-11-21 14:34 2020-02-6 Show GitHub Exploit DB Packet Storm
199512 5.9 MEDIUM
Network 		fujixerox apeosware_management_suite The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensiti… CWE-295
Improper Certificate Validation  		CVE-2020-5526 2024-11-21 14:34 2020-01-31 Show GitHub Exploit DB Packet Storm
199513 7.4 HIGH
Network 		nttdata
ashikagabank
sihd-bk
shikokubank
tohoku-bank
naganobank
77bank
hokkaidobank
hokugin 		mypallete
ashigin
ikeda_senshu_bank
shikoku_bank
tougin
nagagin
77_bank
dogin
hokuriku_bank_portal 		Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-misma… CWE-295
Improper Certificate Validation  		CVE-2020-5523 2024-11-21 14:34 2020-01-28 Show GitHub Exploit DB Packet Storm
199514 7.4 HIGH
Network 		fujixerox easy_netprint The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… CWE-295
Improper Certificate Validation  		CVE-2020-5522 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
199515 7.4 HIGH
Network 		fujixerox easy_netprint The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra… CWE-295
Improper Certificate Validation  		CVE-2020-5521 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
199516 7.4 HIGH
Network 		fujixerox netprint The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce… CWE-295
Improper Certificate Validation  		CVE-2020-5520 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
199517 7.9 HIGH
Adjacent 		philips hue_bridge_v2_firmware Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code… CWE-787
 Out-of-bounds Write 		CVE-2020-6007 2024-11-21 14:34 2020-01-24 Show GitHub Exploit DB Packet Storm
199518 5.3 MEDIUM
Network 		vmware
oracle 		spring_framework
flexcube_private_banking
insurance_policy_administration_j2ee
insurance_rules_palette
retail_service_backbone
retail_back_office
weblogic_server
application_test… 		Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) … CWE-352
 Origin Validation Error 		CVE-2020-5397 2024-11-21 14:34 2020-01-18 Show GitHub Exploit DB Packet Storm
199519 7.5 HIGH
Network 		vmware
oracle
netapp 		spring_framework
flexcube_private_banking
insurance_policy_administration_j2ee
insurance_rules_palette
retail_service_backbone
retail_back_office
weblogic_server
application_test… 		In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it … CWE-494
 Download of Code Without Integrity Check 		CVE-2020-5398 2024-11-21 14:34 2020-01-17 Show GitHub Exploit DB Packet Storm
199520 6.5 MEDIUM
Network 		phpbb phpbb phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships. CWE-352
 Origin Validation Error 		CVE-2020-5502 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm