Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227671	2.6	注意	Google Mozilla Foundation	-	複数の製品で使用される SPDY プロトコルにおける平文の HTTP ヘッダを取得される脆弱性	CWE-310 暗号の問題	CVE-2012-4930	2012-12-28 18:12	2012-09-15	Show	GitHub Exploit DB Packet Storm

227672	6.8	警告	Google Mozilla Foundation	-	Google Chrome の OpenType サニタイザにおける一つずれ (Off-by-one) エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3062	2012-12-28 18:09	2012-03-28	Show	GitHub Exploit DB Packet Storm

227673	7.6	危険	Post Oak Traffic Systems	-	Post Oak AWAM Bluetooth Reader Traffic System におけるデバイスを偽装される脆弱性	CWE-310 暗号の問題	CVE-2012-4687	2012-12-28 16:25	2011-11-30	Show	GitHub Exploit DB Packet Storm

227674	4.3	警告	日立	-	複数の日立製品に含まれる Collaboration - Bulletin board におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2012-12-28 16:17	2012-12-25	Show	GitHub Exploit DB Packet Storm

227675	4.3	警告	Catalin Florian Radut	-	Drupal 用 Zero Point モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5591	2012-12-28 16:06	2012-11-28	Show	GitHub Exploit DB Packet Storm

227676	7.5	危険	Script Head	-	Drupal 用 Webmail Plus モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-5590	2012-12-28 16:06	2012-11-28	Show	GitHub Exploit DB Packet Storm

227677	3.5	注意	Net Genius	-	Drupal 用 MultiLink モジュールにおける任意のノードタイトルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2012-5589	2012-12-28 16:04	2012-11-28	Show	GitHub Exploit DB Packet Storm

227678	2.6	注意	Matthias Hutterer	-	Drupal 用 Email Field モジュールにおける電子メールを送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5588	2012-12-28 16:02	2012-11-28	Show	GitHub Exploit DB Packet Storm

227679	4.3	警告	Matthias Hutterer	-	Drupal 用 Email Field モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5587	2012-12-28 15:58	2012-11-28	Show	GitHub Exploit DB Packet Storm

227680	2.1	注意	Marc Ingram	-	Drupal 用 Services モジュールにおける任意のユーザの電子メールにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5586	2012-12-28 15:57	2012-11-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208221	3.3	LOW Local	imagemagick debian	imagemagick debian_linux	In IntensityCompare() of /MagickCore/quantize.c, a double value was being casted to int and returned, which in some cases caused a value outside the range of type `int` to be returned. The flaw could…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27759	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

208222	6.1	MEDIUM Network	elastic redhat	kibana openshift_container_platform	The elasticsearch-operator does not validate the namespace where kibana logging resource is created and due to that it is possible to replace the original openshift-logging console link (kibana conso…	CWE-601 Open Redirect	CVE-2020-27816	2024-11-21 14:21	2020-12-2	Show	GitHub Exploit DB Packet Storm

208223	7.5	HIGH Network	gorillatoolkit debian	websocket debian_linux	An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server…	CWE-190 CWE-400 Integer Overflow or Wraparound Uncontrolled Resource Consumption	CVE-2020-27813	2024-11-21 14:21	2020-12-2	Show	GitHub Exploit DB Packet Storm

208224	6.7	MEDIUM Local	quickheal	total_security	Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password.	CWE-521 Weak Password Requirements	CVE-2020-27587	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

208225	5.9	MEDIUM Network	quickheal	total_security	Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27586	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

208226	4.4	MEDIUM Local	quickheal	total_security	Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password.	CWE-521 Weak Password Requirements	CVE-2020-27585	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

208227	9.8	CRITICAL Network	synology	safeaccess	SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter.	CWE-89 SQL Injection	CVE-2020-27660	2024-11-21 14:21	2020-11-30	Show	GitHub Exploit DB Packet Storm

208228	4.8	MEDIUM Network	synology	safeaccess	Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter.	CWE-79 Cross-site Scripting	CVE-2020-27659	2024-11-21 14:21	2020-11-30	Show	GitHub Exploit DB Packet Storm

208229	3.7	LOW Network	schedmd debian	slurm debian_linux	Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /pro…	CWE-362 Race Condition	CVE-2020-27746	2024-11-21 14:21	2020-11-28	Show	GitHub Exploit DB Packet Storm

208230	9.8	CRITICAL Network	schedmd debian	slurm debian_linux	Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.	CWE-120 Classic Buffer Overflow	CVE-2020-27745	2024-11-21 14:21	2020-11-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed