Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227571	5	警告	libssh	-	libssh の keys.c におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-4561	2012-12-21 15:19	2012-11-20	Show	GitHub Exploit DB Packet Storm

227572	6.8	警告	libssh	-	libssh の複数の関数におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-4559	2012-12-21 15:18	2012-11-20	Show	GitHub Exploit DB Packet Storm

227573	7.5	危険	libssh	-	libssh の sftp.c におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-6063	2012-12-21 15:16	2012-11-20	Show	GitHub Exploit DB Packet Storm

227574	3.6	注意	oVirt	-	SANLock の log.h におけるファイルコンテンツを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5638	2012-12-21 15:08	2012-12-20	Show	GitHub Exploit DB Packet Storm

227575	7.9	危険	IBM	-	IBM POWER5 のサービス・プロセッサーに権限昇格の脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-4856	2012-12-21 14:56	2012-12-13	Show	GitHub Exploit DB Packet Storm

227576	7.5	危険	Ciprian Popescu	-	WordPress 用 Portable phpMyAdmin プラグインにおける認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5469	2012-12-21 14:08	2012-12-20	Show	GitHub Exploit DB Packet Storm

227577	2.6	注意	NHN Japan	-	Android 版ロケタッチにおける情報管理不備の脆弱性	CWE-Other その他	CVE-2012-5183	2012-12-21 12:02	2012-12-21	Show	GitHub Exploit DB Packet Storm

227578	2.6	注意	NHN Japan	-	Android 版ロケタッチにおける暗黙的 Intent の扱いに関する脆弱性	CWE-DesignError	CVE-2012-5182	2012-12-21 12:01	2012-12-21	Show	GitHub Exploit DB Packet Storm

227579	10	危険	IBM	-	IBM WAS for z/OS の IBM HTTP Server コンポーネントにおける任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-5955	2012-12-21 11:50	2012-12-19	Show	GitHub Exploit DB Packet Storm

227580	5	警告	IBM	-	IBM Rational ClearQuest の Web クライアントにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-5765	2012-12-21 11:48	2012-12-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215391	9.8	CRITICAL Network	roundcube opensuse	webmail leap backports_sle	rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.	CWE-78 OS Command	CVE-2020-12641	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

215392	9.8	CRITICAL Network	roundcube opensuse	webmail leap backports_sle	Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.	CWE-22 Path Traversal	CVE-2020-12640	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

215393	8.8	HIGH Network	tp-link	nc260_firmware nc450_firmware	Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.	CWE-78 OS Command	CVE-2020-12111	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

215394	6.1	MEDIUM Network	phplist	phplist	phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php.	CWE-79 Cross-site Scripting	CVE-2020-12639	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

215395	5.5	MEDIUM Local	tp-link	omada_controller	TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-we…	CWE-22 Path Traversal	CVE-2020-12475	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

215396	9.8	CRITICAL Network	tp-link	nc200_firmware nc210_firmware nc220_firmware nc230_firmware nc250_firmware nc260_firmware nc450_firmware	Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, …	CWE-798 Use of Hard-coded Credentials	CVE-2020-12110	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

215397	5.4	MEDIUM Network	enhancesoft	osticket	include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.	CWE-79 Cross-site Scripting	CVE-2020-12629	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

215398	4.7	MEDIUM Local	linux	linux_kernel	A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to …	CWE-362 Race Condition	CVE-2020-12114	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

215399	9.8	CRITICAL Network	janeczku	calibre-web	Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.	CWE-798 Use of Hard-coded Credentials	CVE-2020-12627	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

215400	6.5	MEDIUM Network	roundcube debian	webmail debian_linux	An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered.	CWE-352 Origin Validation Error	CVE-2020-12626	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed