Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225871	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5248	2012-12-26 14:01	2012-10-8	Show	GitHub Exploit DB Packet Storm

225872	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5255	2012-12-26 14:01	2012-10-8	Show	GitHub Exploit DB Packet Storm

225873	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5254	2012-12-26 13:59	2012-10-8	Show	GitHub Exploit DB Packet Storm

225874	5	警告	マイクロソフトアドビシステムズ	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2012-4171	2012-12-26 13:59	2012-08-30	Show	GitHub Exploit DB Packet Storm

225875	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5253	2012-12-26 13:58	2012-10-8	Show	GitHub Exploit DB Packet Storm

225876	4.3	警告	マイクロソフトアドビシステムズ	-	Adobe Flash Player におけるコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2012-4168	2012-12-26 13:58	2012-08-21	Show	GitHub Exploit DB Packet Storm

225877	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-5252	2012-12-26 13:57	2012-10-8	Show	GitHub Exploit DB Packet Storm

225878	10	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-4167	2012-12-26 13:57	2012-08-21	Show	GitHub Exploit DB Packet Storm

225879	10	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-4165	2012-12-26 13:56	2012-08-21	Show	GitHub Exploit DB Packet Storm

225880	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5251	2012-12-26 13:55	2012-10-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197181	3.3	LOW Local	pulsesecure	pulse_secure_desktop	Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.	CWE-521 Weak Password Requirements	CVE-2020-8956	2024-11-21 14:39	2020-10-27	Show	GitHub Exploit DB Packet Storm

197182	5.3	MEDIUM Network	google	tink	A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a secon…	NVD-CWE-Other	CVE-2020-8929	2024-11-21 14:39	2020-10-19	Show	GitHub Exploit DB Packet Storm

197183	5.4	MEDIUM Network	webmin	webmin	An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visitin…	CWE-79 Cross-site Scripting	CVE-2020-8821	2024-11-21 14:39	2020-10-13	Show	GitHub Exploit DB Packet Storm

197184	5.4	MEDIUM Network	webmin	webmin	An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting t…	CWE-79 Cross-site Scripting	CVE-2020-8820	2024-11-21 14:39	2020-10-13	Show	GitHub Exploit DB Packet Storm

197185	5.5	MEDIUM Local	huawei	taurus-al00a_firmware	Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due t…	CWE-125 Out-of-bounds Read	CVE-2020-9087	2024-11-21 14:39	2020-10-12	Show	GitHub Exploit DB Packet Storm

197186	8.1	HIGH Adjacent	johnsoncontrols tyco	victor_web_client c-cure_web_client	A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-9048	2024-11-21 14:39	2020-10-9	Show	GitHub Exploit DB Packet Storm

197187	9.8	CRITICAL Network	sierrawireless	aleos	Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.	NVD-CWE-noinfo	CVE-2020-8782	2024-11-21 14:39	2020-10-6	Show	GitHub Exploit DB Packet Storm

197188	7.8	HIGH Local	sierrawireless	aleos	Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process.	NVD-CWE-noinfo	CVE-2020-8781	2024-11-21 14:39	2020-10-6	Show	GitHub Exploit DB Packet Storm

197189	5.5	MEDIUM Local	intel	bios	Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM) Processors and Intel(R) Celeron(R) Processor 4000 Series may allow an authenticated user to potentially ena…	NVD-CWE-noinfo	CVE-2020-8671	2024-11-21 14:39	2020-10-5	Show	GitHub Exploit DB Packet Storm

197190	7.5	HIGH Network	telestream	sentry medius	Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=l…	CWE-89 SQL Injection	CVE-2020-8887	2024-11-21 14:39	2020-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed