Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225801 4.3 警告 Matthias Hutterer - Drupal 用 Email Field モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5587 2012-12-28 15:58 2012-11-28 Show GitHub Exploit DB Packet Storm
225802 2.1 注意 Marc Ingram - Drupal 用 Services モジュールにおける任意のユーザの電子メールにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5586 2012-12-28 15:57 2012-11-28 Show GitHub Exploit DB Packet Storm
225803 2.1 注意 Mixpanel Project - Drupal 用 Mixpanel モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5585 2012-12-28 15:50 2012-11-28 Show GitHub Exploit DB Packet Storm
225804 4.3 警告 Made to Order Software - Drupal 用 Table of Contents モジュールにおけるノードのヘッダを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5584 2012-12-28 15:49 2012-11-14 Show GitHub Exploit DB Packet Storm
225805 6.8 警告 Sensio Labs - Symfony における任意のサービスにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6432 2012-12-28 15:20 2012-12-20 Show GitHub Exploit DB Packet Storm
225806 6.4 警告 Sensio Labs - Symfony における URI の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6431 2012-12-28 15:18 2012-12-20 Show GitHub Exploit DB Packet Storm
225807 4.3 警告 Sebastian Heinlein
Canonical		 - Ubuntu の Aptdaemon における任意のパッケージレポジトリの GPG キーをインストールされる脆弱性 CWE-noinfo
情報不足 		CVE-2012-0962 2012-12-28 15:03 2012-12-17 Show GitHub Exploit DB Packet Storm
225808 2.1 注意 Debian - Ubuntu で使用される APT における重要なシェル情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0961 2012-12-28 14:59 2012-12-12 Show GitHub Exploit DB Packet Storm
225809 4.3 警告 PS Project Management Team - Firefox 用 Unity integration 拡張機能における同一生成元ポリシーを回避される脆弱性 CWE-DesignError
CVE-2012-0958 2012-12-28 14:58 2012-10-23 Show GitHub Exploit DB Packet Storm
225810 - - Ruby on Rails project - ** 削除 ** Ruby on Rails 用 Authlogic gem における SQL インジェクションの脆弱性 - CVE-2012-5664 2012-12-28 14:22 2012-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197451 8.8 HIGH
Network 		kinetica kinetica The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs. This lack of sanitisation could be exploited to allow an authenticated atta… CWE-78
OS Command  		CVE-2020-8429 2024-11-21 14:38 2020-02-12 Show GitHub Exploit DB Packet Storm
197452 5.4 MEDIUM
Network 		piwigo piwigo Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page. CWE-79
Cross-site Scripting 		CVE-2020-8089 2024-11-21 14:38 2020-02-11 Show GitHub Exploit DB Packet Storm
197453 7.8 HIGH
Local 		ui edgeswitch A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user (Privilege-1) to es… CWE-78
OS Command  		CVE-2020-8126 2024-11-21 14:38 2020-02-8 Show GitHub Exploit DB Packet Storm
197454 7.8 HIGH
Local 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudo… CWE-306
Missing Authentication for Critical Function 		CVE-2020-7954 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
197455 7.5 HIGH
Network 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -iL (aka input file) option. CWE-306
Missing Authentication for Critical Function 		CVE-2020-7953 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
197456 7.5 HIGH
Network 		percona monitoring_and_management pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-7920 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
197457 7.5 HIGH
Network 		rogersmedia citytv_video The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-8507 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
197458 5.3 MEDIUM
Network 		corusent global_tv The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-8506 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
197459 7.5 HIGH
Network 		gitlab gitlab GitLab EE 12.6 and later through 12.7.2 allows Denial of Service. NVD-CWE-noinfo
CVE-2020-7978 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
197460 5.3 MEDIUM
Network 		gitlab gitlab GitLab EE 8.8 and later through 12.7.2 has Insecure Permissions. CWE-276
Incorrect Default Permissions  		CVE-2020-7977 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm