Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225811 4.3 警告 Opera Software ASA - Android 版 Opera Mini ウェブブラウザおよび Opera Mobile ウェブブラウザにおいて任意のスクリプトが実行される脆弱性 CWE-200
情報漏えい 		CVE-2012-5180 2012-12-28 14:17 2012-12-20 Show GitHub Exploit DB Packet Storm
225812 2.6 注意 WordPress.org - WordPress における有効なセッション識別子を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5868 2012-12-28 11:58 2012-12-27 Show GitHub Exploit DB Packet Storm
225813 4.9 警告 Linux - Linux Kernel と一緒に配布される hypervkvpd におけるサービス運用妨害 (Daemon Exit) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5532 2012-12-28 11:44 2012-12-22 Show GitHub Exploit DB Packet Storm
225814 5 警告 シトリックス・システムズ - Citrix XenDesktop Virtual Desktop Agent における USB デバイスへのアクセス権を保持される脆弱性 CWE-noinfo
情報不足 		CVE-2012-6314 2012-12-28 11:20 2012-12-11 Show GitHub Exploit DB Packet Storm
225815 9.3 危険 シトリックス・システムズ - Citrix XenApp の XML Service インターフェースにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5161 2012-12-28 11:08 2012-12-11 Show GitHub Exploit DB Packet Storm
225816 10 危険 CA Technologies - CA IdentityMinder におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2012-6299 2012-12-28 10:58 2012-12-20 Show GitHub Exploit DB Packet Storm
225817 10 危険 CA Technologies - CA IdentityMinder における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-6298 2012-12-28 10:57 2012-12-20 Show GitHub Exploit DB Packet Storm
225818 5 警告 DELL EMC (旧 EMC Corporation) - EMC Data Protection Advisor におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-4616 2012-12-28 10:40 2012-12-26 Show GitHub Exploit DB Packet Storm
225819 7.2 危険 IBM - IBM z/OS 上で稼働する Tivoli NetView における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5951 2012-12-28 10:38 2012-12-21 Show GitHub Exploit DB Packet Storm
225820 4.3 警告 CA Technologies - CA SiteMinder にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4054 2012-12-27 16:36 2011-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212361 6.1 MEDIUM
Network 		gtranslate translate_wordpress_with_gtranslate The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. CWE-79
Cross-site Scripting 		CVE-2020-11930 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
212362 9.8 CRITICAL
Network 		davidlingren media_library_assistant In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin. NVD-CWE-noinfo
CVE-2020-11928 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
212363 9.1 CRITICAL
Network 		libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read 		CVE-2020-11895 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
212364 9.1 CRITICAL
Network 		libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read 		CVE-2020-11894 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
212365 6.1 MEDIUM
Network 		svg2png_project svg2png svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. CWE-79
Cross-site Scripting 		CVE-2020-11887 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
212366 8.1 HIGH
Network 		opennms horizon
meridian 		OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Mer… CWE-89
SQL Injection 		CVE-2020-11886 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
212367 7.2 HIGH
Network 		wso2 enterprise_integrator WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network invocations such as SSRF via an uploade… CWE-611
CWE-918
XXE
Server-Side Request Forgery (SSRF)  		CVE-2020-11885 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
212368 5.3 MEDIUM
Network 		divante storefront-api
vue-storefront-api 		In Divante vue-storefront-api through 1.11.1 and storefront-api through 1.0-rc.1, as used in VueStorefront PWA, unexpected HTTP requests lead to an exception that discloses the error stack trace, wit… CWE-209
Information Exposure Through an Error Message 		CVE-2020-11883 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
212369 6.5 MEDIUM
Network 		kde kmail An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make KMail attach local file… NVD-CWE-Other
CVE-2020-11880 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
212370 6.5 MEDIUM
Network 		gnome evolution An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or other source of mailto links) can make Evolution attach … NVD-CWE-Other
CVE-2020-11879 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm