Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
246351 7.8 危険 3com - 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point の Web 管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題
CVE-2008-6395 2012-06-26 16:10 2009-03-4 Show GitHub Exploit DB Packet Storm
246352 7.5 危険 CS-Cart - CS-Cart の core/user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6394 2012-06-26 16:10 2009-03-4 Show GitHub Exploit DB Packet Storm
246353 7.5 危険 1scripts - Z1Exchange の showads.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6392 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246354 7.5 危険 aliensoftcorp - Rae Media Contact Management Software SOHO の asadmin/default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6389 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246355 5 警告 4u2ges - Rapid Classified におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6388 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246356 5 警告 Activewebsoftwares - Quick Tree View .NET におけるデータベースファイルをダウンロードされる脆弱性 CWE-200
情報漏えい
CVE-2008-6387 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246357 4.3 警告 1scripts - Z1Exchange の showads.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-6386 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246358 5 警告 aspportal - ASP Portal におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-6382 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246359 4.6 警告 bcoos - bcoos の modules/adresses/viewcat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6381 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
246360 7.5 危険 Activewebsoftwares - Active Web Helpdesk の default.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-6380 2012-06-26 16:10 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218481 10.0 CRITICAL
Network
mozilla firefox
firefox_esr
The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. *Note: this issue only affects Firefox on Windows operating systems.*. This vulnerab… CWE-20
 Improper Input Validation 
CVE-2020-12388 2024-11-21 13:59 2020-05-27 Show GitHub Exploit DB Packet Storm
218482 8.1 HIGH
Network
mozilla thunderbird
firefox
firefox_esr
A race condition when running shutdown code for Web Worker led to a use-after-free vulnerability. This resulted in a potentially exploitable crash. This vulnerability affects Firefox ESR < 68.8, Fire… CWE-362
CWE-416
Race Condition
 Use After Free
CVE-2020-12387 2024-11-21 13:59 2020-05-27 Show GitHub Exploit DB Packet Storm
218483 9.8 CRITICAL
Network
mozilla firefox Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of thes… CWE-787
 Out-of-bounds Write
CVE-2020-12396 2024-11-21 13:59 2020-05-27 Show GitHub Exploit DB Packet Storm
218484 9.8 CRITICAL
Network
mozilla
canonical
thunderbird
firefox
firefox_esr
ubuntu_linux
Mozilla developers and community members reported memory safety bugs present in Firefox 75 and Firefox ESR 68.7. Some of these bugs showed evidence of memory corruption and we presume that with enoug… CWE-787
 Out-of-bounds Write
CVE-2020-12395 2024-11-21 13:59 2020-05-27 Show GitHub Exploit DB Packet Storm
218485 3.3 LOW
Local
mozilla firefox A logic flaw in our location bar implementation could have allowed a local attacker to spoof the current location by selecting a different origin and removing focus from the input element. This vulne… NVD-CWE-noinfo
CVE-2020-12394 2024-11-21 13:59 2020-05-27 Show GitHub Exploit DB Packet Storm
218486 7.8 HIGH
Local
mozilla firefox
firefox_esr
thunderbird
The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as cURL' feature and pasted … CWE-78
OS Command 
CVE-2020-12393 2024-11-21 13:59 2020-05-27 Show GitHub Exploit DB Packet Storm
218487 4.3 MEDIUM
Network
mozilla
canonical
thunderbird
ubuntu_linux
By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird < 68.8.0. CWE-346
 Origin Validation Error
CVE-2020-12397 2024-11-21 13:59 2020-05-23 Show GitHub Exploit DB Packet Storm
218488 6.6 MEDIUM
Local
splashtop software_updater
streamer
A Windows privilege change issue was discovered in Splashtop Software Updater before 1.5.6.16. Insecure permissions on the configuration file and named pipe allow for local privilege escalation to NT… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-12431 2024-11-21 13:59 2020-05-22 Show GitHub Exploit DB Packet Storm
218489 8.8 HIGH
Local
unisys algol_compiler Unisys ALGOL Compiler 58.1 before 58.1a.15, 59.1 before 59.1a.9, and 60.0 before 60.0a.5 can emit invalid code sequences under rare circumstances related to syntax. The resulting code could, for exam… NVD-CWE-Other
CVE-2020-12647 2024-11-21 13:59 2020-05-21 Show GitHub Exploit DB Packet Storm
218490 8.2 HIGH
Adjacent
rockwellautomation eds_subsystem
rsnetworx
rslinx
rslinx_enterprise
studio_5000_logix_designer
Products that use EDS Subsystem: Version 28.0.1 and prior (FactoryTalk Linx software (Previously called RSLinx Enterprise): Versions 6.00, 6.10, and 6.11, RSLinx Classic: Version 4.11.00 and prior, R… CWE-89
SQL Injection
CVE-2020-12034 2024-11-21 13:59 2020-05-20 Show GitHub Exploit DB Packet Storm