Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 15, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225811 | 4.3 | 警告 | Opera Software ASA | - | Android 版 Opera Mini ウェブブラウザおよび Opera Mobile ウェブブラウザにおいて任意のスクリプトが実行される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-5180 | 2012-12-28 14:17 | 2012-12-20 | Show | GitHub Exploit DB Packet Storm |
| 225812 | 2.6 | 注意 | WordPress.org | - | WordPress における有効なセッション識別子を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-5868 | 2012-12-28 11:58 | 2012-12-27 | Show | GitHub Exploit DB Packet Storm |
| 225813 | 4.9 | 警告 | Linux | - | Linux Kernel と一緒に配布される hypervkvpd におけるサービス運用妨害 (Daemon Exit) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-5532 | 2012-12-28 11:44 | 2012-12-22 | Show | GitHub Exploit DB Packet Storm |
| 225814 | 5 | 警告 | シトリックス・システムズ | - | Citrix XenDesktop Virtual Desktop Agent における USB デバイスへのアクセス権を保持される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-6314 | 2012-12-28 11:20 | 2012-12-11 | Show | GitHub Exploit DB Packet Storm |
| 225815 | 9.3 | 危険 | シトリックス・システムズ | - | Citrix XenApp の XML Service インターフェースにおける任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-5161 | 2012-12-28 11:08 | 2012-12-11 | Show | GitHub Exploit DB Packet Storm |
| 225816 | 10 | 危険 | CA Technologies | - | CA IdentityMinder におけるアクセス制限を回避される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-6299 | 2012-12-28 10:58 | 2012-12-20 | Show | GitHub Exploit DB Packet Storm |
| 225817 | 10 | 危険 | CA Technologies | - | CA IdentityMinder における任意のコマンドを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-6298 | 2012-12-28 10:57 | 2012-12-20 | Show | GitHub Exploit DB Packet Storm |
| 225818 | 5 | 警告 | DELL EMC (旧 EMC Corporation) | - | EMC Data Protection Advisor におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-4616 | 2012-12-28 10:40 | 2012-12-26 | Show | GitHub Exploit DB Packet Storm |
| 225819 | 7.2 | 危険 | IBM | - | IBM z/OS 上で稼働する Tivoli NetView における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-5951 | 2012-12-28 10:38 | 2012-12-21 | Show | GitHub Exploit DB Packet Storm |
| 225820 | 4.3 | 警告 | CA Technologies | - | CA SiteMinder にクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4054 | 2012-12-27 16:36 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 15, 2026, 4:28 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211301 | 6.5 |
MEDIUM
Network |
gnome canonical fedoraproject netapp broadcom |
balsa glib-networking ubuntu_linux fedora cloud_backup fabric_operating_system |
In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server… |
CWE-295
Improper Certificate Validation |
CVE-2020-13645 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211302 | 5.4 |
MEDIUM
Network |
pickplugins | accordion | An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher pe… |
CWE-79
Cross-site Scripting |
CVE-2020-13644 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211303 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of … |
CWE-352
Origin Validation Error |
CVE-2020-13643 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211304 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged o… |
CWE-352
Origin Validation Error |
CVE-2020-13642 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211305 | 8.8 |
HIGH
Network |
infolific | real-time_find_and_replace | An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on beh… |
CWE-352
Origin Validation Error |
CVE-2020-13641 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211306 | 6.1 |
MEDIUM
Network |
fork-cms | fork_cms | Fork before 5.8.3 allows XSS via navigation_title or title. |
CWE-79
Cross-site Scripting |
CVE-2020-13633 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211307 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in v… |
CWE-79
Cross-site Scripting |
CVE-2020-13628 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211308 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in … |
CWE-79
Cross-site Scripting |
CVE-2020-13627 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211309 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade debian siemens oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware debian_linux sinec_infrastructu… |
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. |
CWE-476
NULL Pointer Dereference |
CVE-2020-13632 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211310 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade siemens apple oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware sinec_infrastructure_network_servi… |
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. |
NVD-CWE-noinfo
|
CVE-2020-13631 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |