Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227111 5.8 警告 レッドハット - Red Hat OpenShift Origin におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-5647 2013-02-27 16:03 2013-01-8 Show GitHub Exploit DB Packet Storm
227112 7.5 危険 レッドハット - Red Hat OpenShift Origin における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-5646 2013-02-27 16:02 2013-01-8 Show GitHub Exploit DB Packet Storm
227113 4.9 警告 レッドハット - Red Hat Enterprise Linux で使用される autofs におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-2697 2013-02-27 15:54 2013-01-8 Show GitHub Exploit DB Packet Storm
227114 5 警告 OpenStack
Canonical
- 複数の OpenStack 製品におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-0247 2013-02-27 15:41 2013-02-5 Show GitHub Exploit DB Packet Storm
227115 4 警告 OpenStack
Canonical
- 複数の OpenStack 製品の store/swift.py における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0212 2013-02-27 15:40 2013-01-29 Show GitHub Exploit DB Packet Storm
227116 5 警告 infradead - OpenConnect の http.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-6128 2013-02-27 15:15 2013-02-13 Show GitHub Exploit DB Packet Storm
227117 4.3 警告 Novell
Canonical
Digia
- Qt の QSslSocket::sslErrors 関数における誤ったエラーを報告される脆弱性 CWE-310
暗号の問題
CVE-2012-6093 2013-02-27 15:13 2012-12-12 Show GitHub Exploit DB Packet Storm
227118 4.3 警告 Canonical
Digia
- Qt の XMLHttpRequest オブジェクトにおける任意のローカルファイルの読み取りを強制される脆弱性 CWE-200
情報漏えい
CVE-2012-5624 2013-02-27 15:11 2012-11-20 Show GitHub Exploit DB Packet Storm
227119 10 危険 3S-Smart Software Solutions - 3S CODESYS Gateway-Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4708 2013-02-27 15:06 2013-02-19 Show GitHub Exploit DB Packet Storm
227120 10 危険 3S-Smart Software Solutions - 3S CODESYS Gateway-Server における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-4707 2013-02-27 15:06 2013-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208571 8.8 HIGH
Network
idreamsoft icms A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts. CWE-352
 Origin Validation Error
CVE-2020-26641 2024-11-21 14:20 2021-05-29 Show GitHub Exploit DB Packet Storm
208572 5.4 MEDIUM
Network
vfairs vfairs In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the databas… CWE-79
Cross-site Scripting
CVE-2020-26680 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208573 4.3 MEDIUM
Network
vfairs vfairs vFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference or event can modify any other users profile information or profile picture. After receiving any user'… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2020-26679 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208574 8.8 HIGH
Network
vfairs vfairs vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP f… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-26678 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208575 8.8 HIGH
Network
vfairs vfairs Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API. CWE-89
SQL Injection
CVE-2020-26677 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208576 8.1 HIGH
Adjacent
bluetooth mesh_profile Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without posse… CWE-863
 Incorrect Authorization
CVE-2020-26560 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208577 8.8 HIGH
Adjacent
bluetooth mesh_profile Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s … CWE-863
 Incorrect Authorization
CVE-2020-26559 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208578 4.2 MEDIUM
Adjacent
bluetooth
fedoraproject
debian
linux
intel
bluetooth_core_specification
fedora
debian_linux
linux_kernel
ax210_firmware
ax201_firmware
ax200_firmware
ac_9560_firmware
ac_9462_firmware
ac_9461_firmware
ac_9260_fir…
Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authe… CWE-287
Improper Authentication
CVE-2020-26558 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208579 7.5 HIGH
Adjacent
bluetooth mesh_profile Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute… CWE-287
Improper Authentication
CVE-2020-26557 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208580 7.5 HIGH
Adjacent
bluetooth mesh_profile
bluetooth_core_specification
Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, able to conduct a successful brute-force attack on an insufficiently random AuthValue before the provisioning… CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-26556 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm