Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226931 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5260 2012-12-26 14:24 2012-10-8 Show GitHub Exploit DB Packet Storm
226932 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5259 2012-12-26 14:23 2012-10-8 Show GitHub Exploit DB Packet Storm
226933 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-5258 2012-12-26 14:22 2012-10-8 Show GitHub Exploit DB Packet Storm
226934 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5257 2012-12-26 14:06 2012-10-8 Show GitHub Exploit DB Packet Storm
226935 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-5256 2012-12-26 14:02 2012-10-8 Show GitHub Exploit DB Packet Storm
226936 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5248 2012-12-26 14:01 2012-10-8 Show GitHub Exploit DB Packet Storm
226937 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5255 2012-12-26 14:01 2012-10-8 Show GitHub Exploit DB Packet Storm
226938 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5254 2012-12-26 13:59 2012-10-8 Show GitHub Exploit DB Packet Storm
226939 5 警告 マイクロソフト
アドビシステムズ		 - Adobe Flash Player におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2012-4171 2012-12-26 13:59 2012-08-30 Show GitHub Exploit DB Packet Storm
226940 10 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5253 2012-12-26 13:58 2012-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214541 6.1 MEDIUM
Network 		canon oce_colorwave_500_firmware The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Reflected XSS in /home.jsp. The vulnerable parameter is openSI. NOTE: this is fixed in the latest version. CWE-79
Cross-site Scripting 		CVE-2020-10668 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
214542 6.1 MEDIUM
Network 		canon oce_colorwave_500_firmware The web application exposed by the Canon Oce Colorwave 500 4.0.0.0 printer is vulnerable to Stored XSS in /TemplateManager/indexExternalLocation.jsp. The vulnerable parameter is map(template_name). N… CWE-79
Cross-site Scripting 		CVE-2020-10667 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
214543 8.8 HIGH
Network 		octopus octopus_deploy In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an authenticated user can leverage a bug to escalate privileges. NVD-CWE-noinfo
CVE-2020-10678 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
214544 7.5 HIGH
Network 		jsonparser_project
fedoraproject 		jsonparser
fedora 		The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-10675 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
214545 7.8 HIGH
Local 		denx
opensuse 		u-boot
leap 		Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default con… CWE-20
 Improper Input Validation  		CVE-2020-10648 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
214546 9.8 CRITICAL
Network 		perlspeak_project perlspeak PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open. CWE-78
OS Command  		CVE-2020-10674 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
214547 6.5 MEDIUM
Network 		logicaldoc logicaldoc LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of t… CWE-89
SQL Injection 		CVE-2020-10365 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
214548 8.8 HIGH
Network 		fasterxml
debian
netapp
oracle 		jackson-databind
debian_linux
steelstore_cloud_integrated_storage
retail_xstore_point_of_service
primavera_unifier
retail_service_backbone
weblogic_server
retail_merchandising_sy… 		FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). NVD-CWE-Other
CVE-2020-10673 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
214549 8.8 HIGH
Network 		fasterxml
debian
netapp
oracle 		jackson-databind
debian_linux
steelstore_cloud_integrated_storage
retail_xstore_point_of_service
primavera_unifier
retail_service_backbone
weblogic_server
retail_merchandising_sy… 		FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka… NVD-CWE-Other
CVE-2020-10672 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
214550 6.7 MEDIUM
Local 		docker desktop Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwr… CWE-59
Link Following 		CVE-2020-10665 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm