Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225771	7.5	危険	Fail2ban	-	Fail2ban の server/action.py における安全でない動作を誘発される脆弱性	CWE-noinfo 情報不足	CVE-2012-5642	2013-01-7 11:34	2012-12-6	Show	GitHub Exploit DB Packet Storm

225772	4.3	警告	Polycom	-	Polycom HDX Video End Points におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4970	2013-01-4 16:45	2012-12-31	Show	GitHub Exploit DB Packet Storm

225773	3.3	注意	Belkin International	-	Belkin N900 ルータの WPA2 の実装における Wi-Fi ネットワークにアクセスされる脆弱性	CWE-310 暗号の問題	CVE-2012-6371	2013-01-4 16:44	2012-12-31	Show	GitHub Exploit DB Packet Storm

225774	7.5	危険	LemonLDAP::NG	-	LemonLDAP::NG におけるアクセスコントロール制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-6426	2013-01-4 16:39	2012-12-18	Show	GitHub Exploit DB Packet Storm

225775	5.8	警告	IBM	-	IBM SPSS Modeler における任意のファイルを読まれる脆弱性	CWE-Other その他	CVE-2012-5769	2013-01-4 16:38	2012-12-28	Show	GitHub Exploit DB Packet Storm

225776	7.5	危険	i-GEN Solutions	-	i-GEN opLYNX の Central アプリケーションにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-4688	2013-01-4 16:31	2012-12-27	Show	GitHub Exploit DB Packet Storm

225777	5.8	警告	vBulletin Solutions, Inc.	-	vBulletin の forum/login.php におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-5251	2013-01-4 16:23	2011-06-2	Show	GitHub Exploit DB Packet Storm

225778	4.3	警告	AgileBits	-	AgileBits 1Password におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6369	2013-01-4 16:20	2012-12-28	Show	GitHub Exploit DB Packet Storm

225779	4.3	警告	Simple Invoices	-	SimpleInvoices におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4932	2013-01-4 16:16	2012-12-28	Show	GitHub Exploit DB Packet Storm

225780	5	警告	ModSecurity	-	Apache HTTP Server 用 mod_security2 モジュールにおけるルールを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4528	2013-01-4 16:14	2012-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197441	9.8	CRITICAL Network	jyaml_project	jyaml	JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product.	CWE-502 Deserialization of Untrusted Data	CVE-2020-8441	2024-11-21 14:38	2020-02-20	Show	GitHub Exploit DB Packet Storm

197442	9.8	CRITICAL Network	broadcom	unified_infrastructure_management	CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker can execute arbitra…	CWE-120 Classic Buffer Overflow	CVE-2020-8012	2024-11-21 14:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

197443	7.5	HIGH Network	broadcom	unified_infrastructure_management	CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a null pointer dereference vulnerability in the robot (controller) component. A remote attacker can crash …	CWE-476 NULL Pointer Dereference	CVE-2020-8011	2024-11-21 14:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

197444	9.8	CRITICAL Network	broadcom	unified_infrastructure_management	CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains an improper ACL handling vulnerability in the robot (controller) component. A remote attacker can execute …	NVD-CWE-Other	CVE-2020-8010	2024-11-21 14:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

197445	5.3	MEDIUM Network	labvantage	labvantage	LabVantage LIMS 8.3 does not properly maintain the confidentiality of database names. For example, the web application exposes the database name. An attacker might be able to enumerate database names…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-7959	2024-11-21 14:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

197446	9.8	CRITICAL Network	horde fedoraproject debian	groupware fedora debian_linux	Horde Groupware Webmail Edition 5.2.22 allows injection of arbitrary PHP code via CSV data, leading to remote code execution.	CWE-94 Code Injection	CVE-2020-8518	2024-11-21 14:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

197447	9.8	CRITICAL Network	unitrends	backup	In Unitrends Backup before 10.4.1, an HTTP request parameter was not properly sanitized, allowing for SQL injection that resulted in an authentication bypass.	CWE-89 SQL Injection	CVE-2020-8427	2024-11-21 14:38	2020-02-18	Show	GitHub Exploit DB Packet Storm

197448	9.8	CRITICAL Network	script-manager_project	script-manager	An unintended require vulnerability in script-manager npm package version 0.8.6 and earlier may allow attackers to execute arbitrary code.	CWE-94 Code Injection	CVE-2020-8129	2024-11-21 14:38	2020-02-15	Show	GitHub Exploit DB Packet Storm

197449	9.8	CRITICAL Network	jsreport	jsreport	An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8128	2024-11-21 14:38	2020-02-15	Show	GitHub Exploit DB Packet Storm

197450	5.3	MEDIUM Network	dovecot fedoraproject	dovecot fedora	The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a den…	CWE-20 Improper Input Validation	CVE-2020-7957	2024-11-21 14:38	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed