Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226351	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5257	2012-12-26 14:06	2012-10-8	Show	GitHub Exploit DB Packet Storm

226352	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-5256	2012-12-26 14:02	2012-10-8	Show	GitHub Exploit DB Packet Storm

226353	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5248	2012-12-26 14:01	2012-10-8	Show	GitHub Exploit DB Packet Storm

226354	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5255	2012-12-26 14:01	2012-10-8	Show	GitHub Exploit DB Packet Storm

226355	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5254	2012-12-26 13:59	2012-10-8	Show	GitHub Exploit DB Packet Storm

226356	5	警告	マイクロソフトアドビシステムズ	-	Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2012-4171	2012-12-26 13:59	2012-08-30	Show	GitHub Exploit DB Packet Storm

226357	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5253	2012-12-26 13:58	2012-10-8	Show	GitHub Exploit DB Packet Storm

226358	4.3	警告	マイクロソフトアドビシステムズ	-	Adobe Flash Player におけるコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2012-4168	2012-12-26 13:58	2012-08-21	Show	GitHub Exploit DB Packet Storm

226359	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-5252	2012-12-26 13:57	2012-10-8	Show	GitHub Exploit DB Packet Storm

226360	10	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-4167	2012-12-26 13:57	2012-08-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213791	7.8	HIGH Local	cmsmadesimple	cms_made_simple	The Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file, as demonstrated by m1_files[] to admin/moduleinterface.php. The file should be sent as application/o…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10682	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213792	5.4	MEDIUM Network	cmsmadesimple	cms_made_simple	The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1_files[] to admin/moduleinterface.php.	CWE-79 Cross-site Scripting	CVE-2020-10681	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213793	7.5	HIGH Network	canon	oce_colorwave_500_firmware	The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to authentication bypass on the page /home.jsp. An unauthenticated attacker able to connect to the device's we…	CWE-287 Improper Authentication	CVE-2020-10669	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213794	8.8	HIGH Network	canon	oce_colorwave_500_firmware	The Canon Oce Colorwave 500 4.0.0.0 printer's web application is missing any form of CSRF protections. This is a system-wide issue. An attacker could perform administrative actions by targeting a log…	CWE-352 Origin Validation Error	CVE-2020-10671	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213795	6.1	MEDIUM Network	canon	oce_colorwave_500_firmware	The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in the parameter settingId of the settingDialogContent.jsp page. NOTE: this is fixed in the l…	CWE-79 Cross-site Scripting	CVE-2020-10670	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213796	6.1	MEDIUM Network	canon	oce_colorwave_500_firmware	The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp. The vulnerable parameter is openSI. NOTE: this is fixed in the latest version.	CWE-79 Cross-site Scripting	CVE-2020-10668	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213797	6.1	MEDIUM Network	canon	oce_colorwave_500_firmware	The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is map(template_name). N…	CWE-79 Cross-site Scripting	CVE-2020-10667	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213798	8.8	HIGH Network	octopus	octopus_deploy	In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an authenticated user can leverage a bug to escalate privileges.	NVD-CWE-noinfo	CVE-2020-10678	2024-11-21 13:55	2020-03-20	Show	GitHub Exploit DB Packet Storm

213799	7.5	HIGH Network	jsonparser_project fedoraproject	jsonparser fedora	The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-10675	2024-11-21 13:55	2020-03-19	Show	GitHub Exploit DB Packet Storm

213800	7.8	HIGH Local	denx opensuse	u-boot leap	Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default con…	CWE-20 Improper Input Validation	CVE-2020-10648	2024-11-21 13:55	2020-03-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed