Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225961 6.8 警告 QNAP Systems - QNAP VioStor NVR のファームウェア上で稼働する cgi-bin/create_user.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0144 2013-06-12 15:11 2013-06-5 Show GitHub Exploit DB Packet Storm
225962 6.5 警告 QNAP Systems - QNAP VioStor NVR のファームウェア上で稼働する cgi-bin/pingping.cgi および QNAP 製 NAS 製品の Surveillance Station Pro における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-0143 2013-06-12 15:10 2013-06-5 Show GitHub Exploit DB Packet Storm
225963 5 警告 QNAP Systems - QNAP VioStor NVR のファームウェアおよび QNAP 製 NAS 製品の Surveillance Station Pro における Web サーバにログインされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-0142 2013-06-12 15:10 2013-06-5 Show GitHub Exploit DB Packet Storm
225964 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の Web コンソールにおけるクローム特権で任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-3980 2013-06-11 18:07 2012-08-28 Show GitHub Exploit DB Packet Storm
225965 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品の nsLocation::CheckURL 関数におけるコンテンツのロードの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3978 2013-06-11 18:04 2012-08-28 Show GitHub Exploit DB Packet Storm
225966 5.8 警告 Mozilla Foundation - 複数の Mozilla 製品におけるアドレスバー内の X.509 証明書情報を偽造される脆弱性 CWE-DesignError
CVE-2012-3976 2013-06-11 18:00 2012-08-28 Show GitHub Exploit DB Packet Storm
225967 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品のインストーラにおける権限を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2012-3974 2013-06-11 17:58 2012-08-28 Show GitHub Exploit DB Packet Storm
225968 5 警告 Mozilla Foundation - 複数の Mozilla 製品の XSLT の format-number の機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3972 2013-06-11 17:55 2012-08-28 Show GitHub Exploit DB Packet Storm
225969 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsTArray_base::Length 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-3970 2013-06-11 17:53 2012-08-28 Show GitHub Exploit DB Packet Storm
225970 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の nsSVGFEMorphologyElement::Filter 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-3969 2013-06-11 17:50 2012-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201961 7.8 HIGH
Local
valvesoftware dota_2 meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted … CWE-787
 Out-of-bounds Write
CVE-2020-7951 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
201962 7.8 HIGH
Local
valvesoftware dota_2 meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted … NVD-CWE-noinfo
CVE-2020-7950 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
201963 7.8 HIGH
Local
valvesoftware dota_2 schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafte… NVD-CWE-noinfo
CVE-2020-7949 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
201964 7.5 HIGH
Network
motu avb_firmware AVB MOTU devices through 2020-01-22 allow /.. Directory Traversal, as demonstrated by reading the /etc/passwd file. CWE-22
Path Traversal
CVE-2020-8009 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
201965 5.5 MEDIUM
Local
virglrenderer_project
debian
virglrenderer
debian_linux
A double-free vulnerability in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service by triggering texture allocation failure, because vrend_renderer_resource_… CWE-415
 Double Free
CVE-2020-8003 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
201966 5.5 MEDIUM
Local
virglrenderer_project
debian
virglrenderer
debian_linux
A NULL pointer dereference in vrend_renderer.c in virglrenderer through 0.8.1 allows attackers to cause a denial of service via commands that attempt to launch a grid without previously providing a C… CWE-476
 NULL Pointer Dereference
CVE-2020-8002 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
201967 9.8 CRITICAL
Network
intelliantech aptus The Intellian Aptus application 1.0.2 for Android has a hardcoded password of intellian for the masteruser FTP account. CWE-798
 Use of Hard-coded Credentials
CVE-2020-8001 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
201968 9.8 CRITICAL
Network
intelliantech aptus_web Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account. CWE-798
 Use of Hard-coded Credentials
CVE-2020-8000 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
201969 9.8 CRITICAL
Network
intelliantech aptus The Intellian Aptus application 1.0.2 for Android has hardcoded values for DOWNLOAD_API_KEY and FILE_DOWNLOAD_API_KEY. CWE-798
 Use of Hard-coded Credentials
CVE-2020-7999 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm
201970 6.1 MEDIUM
Network
dolibarr dolibarr_erp\/crm htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. CWE-79
Cross-site Scripting
CVE-2020-7996 2024-11-21 14:38 2020-01-27 Show GitHub Exploit DB Packet Storm