Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228351	10	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-4165	2012-12-26 13:56	2012-08-21	Show	GitHub Exploit DB Packet Storm

228352	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5251	2012-12-26 13:55	2012-10-8	Show	GitHub Exploit DB Packet Storm

228353	10	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-4164	2012-12-26 13:55	2012-08-21	Show	GitHub Exploit DB Packet Storm

228354	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5250	2012-12-26 13:54	2012-10-8	Show	GitHub Exploit DB Packet Storm

228355	10	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-4163	2012-12-26 13:54	2012-08-21	Show	GitHub Exploit DB Packet Storm

228356	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5249	2012-12-26 13:53	2012-10-8	Show	GitHub Exploit DB Packet Storm

228357	9.3	危険	マイクロソフトアドビシステムズ	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-1535	2012-12-26 13:52	2012-08-14	Show	GitHub Exploit DB Packet Storm

228358	5.8	警告	マイクロソフト	-	Microsoft Windows Server 2008 R2 および Windows Server 2012 におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2012-2549	2012-12-26 13:48	2012-12-11	Show	GitHub Exploit DB Packet Storm

228359	4.3	警告	Haxx サイバートラスト株式会社 VMware レッドハット	-	libcurl の Curl_input_negotiate 関数におけるクライアントになりすまされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-2192	2012-12-26 12:14	2011-06-23	Show	GitHub Exploit DB Packet Storm

228360	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の include/asm-x86/futex.h におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3086	2012-12-26 12:04	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
216521	8.8	HIGH Network	atlassian	alfresco_enterprise_content_management	An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run a…	CWE-74 Injection	CVE-2020-12873	2024-11-21 14:00	2021-02-20	Show	GitHub Exploit DB Packet Storm

216522	6.5	MEDIUM Network	hubspot	jinjava	Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrar…	CWE-863 Incorrect Authorization	CVE-2020-12668	2024-11-21 14:00	2021-02-20	Show	GitHub Exploit DB Packet Storm

216523	7.8	HIGH Local	digi	connectport_x2e_firmware	Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/py…	CWE-59 Link Following	CVE-2020-12878	2024-11-21 14:00	2021-02-18	Show	GitHub Exploit DB Packet Storm

216524	6.5	MEDIUM Network	teradici	cloud_access_connector	An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID…	CWE-352 Origin Validation Error	CVE-2020-13186	2024-11-21 14:00	2021-02-12	Show	GitHub Exploit DB Packet Storm

216525	6.5	MEDIUM Network	teradici	cloud_access_connector	Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an atta…	CWE-287 Improper Authentication	CVE-2020-13185	2024-11-21 14:00	2021-02-12	Show	GitHub Exploit DB Packet Storm

216526	9.8	CRITICAL Network	wavlink	wn575a4_firmware wn579x3_firmware	Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.	CWE-77 Command Injection	CVE-2020-13117	2024-11-21 14:00	2021-02-10	Show	GitHub Exploit DB Packet Storm

216527	4.8	MEDIUM Network	tufin	securechange	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg…	CWE-79 Cross-site Scripting	CVE-2020-13134	2024-11-21 14:00	2021-01-20	Show	GitHub Exploit DB Packet Storm

216528	6.1	MEDIUM Network	tufin	securechange	Tufin SecureChange prior to R19.3 HF3 and R20-1 HF1 are vulnerable to stored XSS. The successful exploitation requires admin privileges (for storing the XSS payload itself), and can exploit (be trigg…	CWE-79 Cross-site Scripting	CVE-2020-13133	2024-11-21 14:00	2021-01-20	Show	GitHub Exploit DB Packet Storm

216529	5.4	MEDIUM Network	carbonite	server_backup_portal	OpenText Carbonite Server Backup Portal before 8.8.7 allows XSS by an authenticated user via policy creation.	CWE-79 Cross-site Scripting	CVE-2020-13116	2024-11-21 14:00	2021-01-13	Show	GitHub Exploit DB Packet Storm

216530	9.8	CRITICAL Network	gssproxy_project debian	gssproxy debian_linux	gssproxy (aka gss-proxy) before 0.8.3 does not unlock cond_mutex before pthread exit in gp_worker_main() in gp_workers.c. NOTE: An upstream comment states "We are already on a shutdown path when runn…	CWE-667 Improper Locking	CVE-2020-12658	2024-11-21 14:00	2020-12-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed