Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228971 2.1 注意 Debian - Ubuntu で使用される APT における重要なシェル情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0961 2012-12-28 14:59 2012-12-12 Show GitHub Exploit DB Packet Storm
228972 4.3 警告 PS Project Management Team - Firefox 用 Unity integration 拡張機能における同一生成元ポリシーを回避される脆弱性 CWE-DesignError
CVE-2012-0958 2012-12-28 14:58 2012-10-23 Show GitHub Exploit DB Packet Storm
228973 - - Ruby on Rails project - ** 削除 ** Ruby on Rails 用 Authlogic gem における SQL インジェクションの脆弱性 - CVE-2012-5664 2012-12-28 14:22 2012-12-26 Show GitHub Exploit DB Packet Storm
228974 4.3 警告 Opera Software ASA - Android 版 Opera Mini ウェブブラウザおよび Opera Mobile ウェブブラウザにおいて任意のスクリプトが実行される脆弱性 CWE-200
情報漏えい
CVE-2012-5180 2012-12-28 14:17 2012-12-20 Show GitHub Exploit DB Packet Storm
228975 2.6 注意 WordPress.org - WordPress における有効なセッション識別子を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-5868 2012-12-28 11:58 2012-12-27 Show GitHub Exploit DB Packet Storm
228976 4.9 警告 Linux - Linux Kernel と一緒に配布される hypervkvpd におけるサービス運用妨害 (Daemon Exit) の脆弱性 CWE-noinfo
情報不足
CVE-2012-5532 2012-12-28 11:44 2012-12-22 Show GitHub Exploit DB Packet Storm
228977 5 警告 シトリックス・システムズ - Citrix XenDesktop Virtual Desktop Agent における USB デバイスへのアクセス権を保持される脆弱性 CWE-noinfo
情報不足
CVE-2012-6314 2012-12-28 11:20 2012-12-11 Show GitHub Exploit DB Packet Storm
228978 9.3 危険 シトリックス・システムズ - Citrix XenApp の XML Service インターフェースにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-5161 2012-12-28 11:08 2012-12-11 Show GitHub Exploit DB Packet Storm
228979 10 危険 CA Technologies - CA IdentityMinder におけるアクセス制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2012-6299 2012-12-28 10:58 2012-12-20 Show GitHub Exploit DB Packet Storm
228980 10 危険 CA Technologies - CA IdentityMinder における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-6298 2012-12-28 10:57 2012-12-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207711 4.9 MEDIUM
Network
mimecast email_security Mimecast Email Security before 2020-01-10 allows any admin to spoof any domain, and pass DMARC alignment via SPF. This occurs through misuse of the address rewrite feature. (The domain being spoofed … NVD-CWE-noinfo
CVE-2020-36519 2024-11-21 14:29 2022-03-16 Show GitHub Exploit DB Packet Storm
207712 7.5 HIGH
Network
fasterxml
oracle
debian
netapp
jackson-databind
weblogic_server
commerce_platform
utilities_framework
peoplesoft_enterprise_peopletools
primavera_unifier
sd-wan_edge
coherence
global_lifecycle_management_ne…
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. CWE-787
 Out-of-bounds Write
CVE-2020-36518 2024-11-21 14:29 2022-03-11 Show GitHub Exploit DB Packet Storm
207713 7.5 HIGH
Network
home-assistant home-assistant An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowledge about internal network resources via the hardcoded DNS r… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-36517 2024-11-21 14:29 2022-03-11 Show GitHub Exploit DB Packet Storm
207714 6.1 MEDIUM
Network
codetipi 15zine The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action, leading to a Reflected Cross-Site Scripting - CVE-2020-36510 2024-11-21 14:29 2022-02-28 Show GitHub Exploit DB Packet Storm
207715 5.9 MEDIUM
Network
linux
netapp
linux_kernel
solidfire_\&_hci_management_node
cloud_volumes_ontap_mediator
solidfire\
_enterprise_sds_\&_hci_storage_node
e-series_santricity_os_controller
h300s_firmware
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-36516 2024-11-21 14:29 2022-02-26 Show GitHub Exploit DB Packet Storm
207716 9.8 CRITICAL
Network
acc_reader_project acc_reader An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. fill_buf may read from uninitialized memory locations. CWE-908
 Use of Uninitialized Resource
CVE-2020-36514 2024-11-21 14:29 2021-12-27 Show GitHub Exploit DB Packet Storm
207717 9.8 CRITICAL
Network
acc_reader_project acc_reader An issue was discovered in the acc_reader crate through 2020-12-27 for Rust. read_up_to may read from uninitialized memory locations. CWE-908
 Use of Uninitialized Resource
CVE-2020-36513 2024-11-21 14:29 2021-12-27 Show GitHub Exploit DB Packet Storm
207718 9.8 CRITICAL
Network
buffoon_project buffoon An issue was discovered in the buffoon crate through 2020-12-31 for Rust. InputStream::read_exact may read from uninitialized memory locations. CWE-908
 Use of Uninitialized Resource
CVE-2020-36512 2024-11-21 14:29 2021-12-27 Show GitHub Exploit DB Packet Storm
207719 7.5 HIGH
Network
bite_project bite An issue was discovered in the bite crate through 2020-12-31 for Rust. read::BiteReadExpandedExt::read_framed_max may read from uninitialized memory locations. CWE-908
 Use of Uninitialized Resource
CVE-2020-36511 2024-11-21 14:29 2021-12-27 Show GitHub Exploit DB Packet Storm
207720 6.5 MEDIUM
Network
delete_all_comments_easily_project delete_all_comments_easily The Delete All Comments Easily WordPress plugin through 1.3 is lacking Cross-Site Request Forgery (CSRF) checks, which could result in an unauthenticated attacker making a logged in admin delete all … - CVE-2020-36505 2024-11-21 14:29 2021-11-1 Show GitHub Exploit DB Packet Storm