Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225611 | 5 | 警告 | サン・マイクロシステムズ | - | Oracle Java SE の Java Runtime Environment における JMX の処理に関する脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-5070 | 2013-01-23 16:13 | 2012-10-16 | Show | GitHub Exploit DB Packet Storm |
| 225612 | 7.5 | 危険 | VMware | - | VMware SpringSource Spring Framework における重要な情報を取得される脆弱性 |
CWE-16
環境設定 |
CVE-2011-2730 | 2013-01-23 14:03 | 2011-09-9 | Show | GitHub Exploit DB Packet Storm |
| 225613 | 5 | 警告 | サン・マイクロシステムズ | - | Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-5067 | 2013-01-22 17:36 | 2012-10-16 | Show | GitHub Exploit DB Packet Storm |
| 225614 | 3.7 | 注意 | libvirt.org | - | libvirt における異なるデバイスを関連づける脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-2693 | 2013-01-22 17:19 | 2012-06-17 | Show | GitHub Exploit DB Packet Storm |
| 225615 | 5 | 警告 | GNOME Project | - | gdk-pixbuf の io-xbm.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2012-2370 | 2013-01-22 17:15 | 2012-04-14 | Show | GitHub Exploit DB Packet Storm |
| 225616 | 7.5 | 危険 | IBM | - | IBM Rational Automation Framework におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-4816 | 2013-01-22 17:12 | 2012-12-14 | Show | GitHub Exploit DB Packet Storm |
| 225617 | 2.1 | 注意 | Linux | - | Linux Kernel と一緒に配布される hypervkvpd における Netlink 通信を偽装される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2012-2669 | 2013-01-22 17:11 | 2012-07-16 | Show | GitHub Exploit DB Packet Storm |
| 225618 | 3.6 | 注意 | X.Org Foundation XFree86 Project |
- | X.Org および XFree86 用 xfs フォントサーバにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2012-1699 | 2013-01-22 16:45 | 2012-07-24 | Show | GitHub Exploit DB Packet Storm |
| 225619 | 5 | 警告 | The PHP Group | - | PHP の ext/openssl/openssl.c におけるプロセスメモリから重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-6113 | 2013-01-22 16:06 | 2012-03-16 | Show | GitHub Exploit DB Packet Storm |
| 225620 | 4.9 | 警告 | シスコシステムズ | - | Cisco Nexus 7000 シリーズのスイッチ上で稼働する Cisco NX-OS におけるサービス運用妨害 (メモリ消費) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-6396 | 2013-01-22 16:05 | 2013-01-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 17, 2026, 4:15 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197561 | 7.5 |
HIGH
Network |
trendmicro | interscan_web_security_virtual_appliance | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost which could expose the product's admin … |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2020-8464 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 197562 | 7.5 |
HIGH
Network |
trendmicro | interscan_web_security_virtual_appliance | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to bypass a global authorization check for anonymous users by manipulating request paths. |
CWE-22
Path Traversal |
CVE-2020-8463 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 197563 | 4.8 |
MEDIUM
Network |
trendmicro | interscan_web_security_virtual_appliance | A cross-site scripting (XSS) vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to tamper with the web interface of the product. |
CWE-79
Cross-site Scripting |
CVE-2020-8462 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 197564 | 8.8 |
HIGH
Network |
trendmicro | interscan_web_security_virtual_appliance | A CSRF protection bypass vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to get a victim's browser to send a specifically encoded request without… |
CWE-352
Origin Validation Error |
CVE-2020-8461 | 2024-11-21 14:38 | 2020-12-18 | Show | GitHub Exploit DB Packet Storm |
| 197565 | 7.5 |
HIGH
Network |
haxx fedoraproject debian netapp apple siemens oracle splunk |
libcurl fedora debian_linux clustered_data_ontap solidfire hci_management_node hci_bootstrap_os hci_storage_node_firmware mac_os_x macos simatic_tim_1531_irc_firmware
curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.
|
CWE-295
|
Improper Certificate Validation
CVE-2020-8286
|
2024-11-21 14:38 |
2020-12-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197566 | 7.5 |
HIGH
Network |
haxx debian fedoraproject netapp apple oracle fujitsu siemens splunk |
libcurl debian_linux fedora clustered_data_ontap solidfire hci_management_node hci_bootstrap_os hci_storage_node_firmware mac_os_x macos peoplesoft_enterprise_peopletool… |
curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing. |
CWE-787 CWE-674 Out-of-bounds Write Uncontrolled Recursion |
CVE-2020-8285 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |
| 197567 | 3.7 |
LOW
Network |
haxx fedoraproject debian netapp apple oracle fujitsu siemens splunk |
curl fedora debian_linux clustered_data_ontap solidfire hci_management_node hci_storage_node hci_bootstrap_os mac_os_x macos peoplesoft_enterprise_peopletools communi… |
A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about ser… |
NVD-CWE-noinfo
|
CVE-2020-8284 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |
| 197568 | 8.8 |
HIGH
Network |
citrix |
xendesktop xenapp virtual_apps_and_desktops |
An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX2861… |
CWE-269
Improper Privilege Management |
CVE-2020-8283 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |
| 197569 | 8.8 |
HIGH
Network |
ui |
edgemax_edgepower_24v_firmware edgemax_edgepower_54v_firmware |
A security issue was found in EdgePower 24V/54V firmware v1.7.0 and earlier where, due to missing CSRF protections, an attacker would have been able to perform unauthorized remote code execution. |
CWE-352
Origin Validation Error |
CVE-2020-8282 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |
| 197570 | 7.5 |
HIGH
Network |
citrix | gateway_plug-in | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files. |
CWE-269
Improper Privilege Management |
CVE-2020-8258 | 2024-11-21 14:38 | 2020-12-15 | Show | GitHub Exploit DB Packet Storm |