Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225641	7.8	危険	シスコシステムズ	-	Cisco ASA 1000V Cloud Firewall 用 ASA ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-5419	2013-01-22 13:42	2013-01-16	Show	GitHub Exploit DB Packet Storm

225642	4.3	警告	FLEUGELz	-	μ-s およびネットマニア版 PHPウェブログシステムにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5186	2013-01-22 12:00	2013-01-22	Show	GitHub Exploit DB Packet Storm

225643	4.3	警告	マイクロソフト	-	Microsoft .NET Framework の Windows Forms コンポーネントにおける重要な情報を取得される脆弱性	CWE-DesignError	CVE-2013-0001	2013-01-22 09:51	2013-01-8	Show	GitHub Exploit DB Packet Storm

225644	9.3	危険	マイクロソフト	-	Microsoft .NET Framework における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0004	2013-01-22 09:47	2013-01-8	Show	GitHub Exploit DB Packet Storm

225645	2.1	注意	OpenStack	-	OpenStack Keystone の tools/sample_data.sh における Amazon EC2 へのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5483	2013-01-21 17:53	2012-12-26	Show	GitHub Exploit DB Packet Storm

225646	5	警告	TWiki Foswiki	-	TWiki および Foswiki におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-189 数値処理の問題	CVE-2012-6330	2013-01-21 17:50	2012-12-14	Show	GitHub Exploit DB Packet Storm

225647	5.5	警告	オラクル	-	Oracle E-Business Suite の Human Resources におけるセキュリティ・グループの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3218	2013-01-21 16:19	2013-01-15	Show	GitHub Exploit DB Packet Storm

225648	4.3	警告	オラクル	-	複数の Oracle Enterprise Manager 製品における User Interface Framework の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-5062	2013-01-21 16:16	2013-01-15	Show	GitHub Exploit DB Packet Storm

225649	5	警告	オラクル	-	Oracle Siebel CRM における Highly Interactive Web UI の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-1701	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

225650	5	警告	オラクル	-	Oracle Siebel CRM における Siebel Core - Server Infrastructure の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3170	2013-01-21 16:13	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212141	8.8	HIGH Network	supsystic	data_tables_generator	The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.	CWE-276 Incorrect Default Permissions	CVE-2020-12075	2024-11-21 13:59	2020-04-23	Show	GitHub Exploit DB Packet Storm

212142	8.8	HIGH Network	webtoffee	import_export_wordpress_users	The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.	CWE-269 Improper Privilege Management	CVE-2020-12074	2024-11-21 13:59	2020-04-23	Show	GitHub Exploit DB Packet Storm

212143	8.8	HIGH Network	cyberchimps	gutenberg_\&_elementor_templates_importer_for_responsive	The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests.	NVD-CWE-Other	CVE-2020-12073	2024-11-21 13:59	2020-04-23	Show	GitHub Exploit DB Packet Storm

212144	4.8	MEDIUM Network	anchorcms	anchor	Anchor 0.12.7 allows admins to cause XSS via crafted post content.	CWE-79 Cross-site Scripting	CVE-2020-12071	2024-11-21 13:59	2020-04-23	Show	GitHub Exploit DB Packet Storm

212145	7.5	HIGH Network	teeworlds opensuse fedoraproject debian canonical	teeworlds leap backports_sle fedora debian_linux ubuntu_linux	CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.	CWE-20 Improper Input Validation	CVE-2020-12066	2024-11-21 13:59	2020-04-23	Show	GitHub Exploit DB Packet Storm

212146	7.5	HIGH Network	linuxfoundation canonical	ceph ubuntu_linux	An issue was discovered in Ceph through 13.2.9. A POST request with an invalid tagging XML can crash the RGW process by triggering a NULL pointer exception.	CWE-476 NULL Pointer Dereference	CVE-2020-12059	2024-11-21 13:59	2020-04-22	Show	GitHub Exploit DB Packet Storm

212147	7.5	HIGH Network	mediawiki	mediawiki	The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta=globaluserinfo&guiuser= request. In oth…	NVD-CWE-noinfo	CVE-2020-12051	2024-11-21 13:59	2020-04-22	Show	GitHub Exploit DB Packet Storm

212148	7.5	HIGH Network	evenroute	iqrouter_firmware	In the web-panel in IQrouter through 3.3.1, remote attackers can read system logs because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new ne…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-11968	2024-11-21 13:59	2020-04-21	Show	GitHub Exploit DB Packet Storm

212149	9.8	CRITICAL Network	evenroute	iqrouter_firmware	In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of Incorrect Access Control. Note: The vendor claims that this vulnerability can o…	CWE-862 Missing Authorization	CVE-2020-11967	2024-11-21 13:59	2020-04-21	Show	GitHub Exploit DB Packet Storm

212150	9.8	CRITICAL Network	evenroute	iqrouter_firmware	In IQrouter through 3.3.1, the Lua function reset_password in the web-panel allows remote attackers to change the root password arbitrarily. Note: The vendor claims that this vulnerability can only o…	CWE-521 Weak Password Requirements	CVE-2020-11966	2024-11-21 13:59	2020-04-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed