Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248551	4.3	警告	Bloxx	-	Bloxx Web Filtering におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2563	2012-06-12 15:10	2011-06-9	Show	GitHub Exploit DB Packet Storm

248552	5.8	警告	シーメンス	-	Siemens WinCC の Web アプリケーションにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-3003	2012-06-12 14:31	2012-06-5	Show	GitHub Exploit DB Packet Storm

248553	4.3	警告	シーメンス	-	Siemens WinCC の DiagAgent Web サーバにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2598	2012-06-12 14:27	2012-06-5	Show	GitHub Exploit DB Packet Storm

248554	4	警告	シーメンス	-	Siemens WinCC におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2597	2012-06-12 14:26	2012-06-5	Show	GitHub Exploit DB Packet Storm

248555	5.5	警告	シーメンス	-	Siemens WinCC の Web アプリケーションの XPath 機能における設定を読まれる脆弱性	CWE-94 コード・インジェクション	CVE-2012-2596	2012-06-12 14:22	2012-06-5	Show	GitHub Exploit DB Packet Storm

248556	4.3	警告	シーメンス	-	Siemens WinCC の Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2595	2012-06-12 14:02	2012-06-5	Show	GitHub Exploit DB Packet Storm

248557	6.4	警告	エマソン	-	Emerson の DeltaV 製品の ActiveX コントロールにおける任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1818	2012-06-12 12:30	2012-05-30	Show	GitHub Exploit DB Packet Storm

248558	7.5	危険	エマソン	-	Emerson の DeltaV 製品におけるバッファオーバーフローの脆弱性	CWE-20 不適切な入力確認	CVE-2012-1817	2012-06-12 12:20	2012-05-30	Show	GitHub Exploit DB Packet Storm

248559	5	警告	エマソン	-	Emerson の DeltaV 製品の PORTSERV.exe におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-119 バッファエラー	CVE-2012-1816	2012-06-12 12:18	2012-05-30	Show	GitHub Exploit DB Packet Storm

248560	7.5	危険	エマソン	-	Emerson の DeltaV 製品における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1815	2012-06-12 12:09	2012-05-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199091	6.5	MEDIUM Network	fastify	fastify	A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted sche…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8192	2024-11-21 14:38	2020-07-30	Show	GitHub Exploit DB Packet Storm

199092	8.8	HIGH Network	citrix	workspace	Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.	CWE-287 Improper Authentication	CVE-2020-8207	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199093	5.5	MEDIUM Local	jpeg-js_project	jpeg-js	Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8175	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199094	8.1	HIGH Network	nodejs oracle netapp	node.js banking_extensibility_workbench retail_xstore_point_of_service mysql_cluster blockchain_platform snapcenter oncommand_workflow_automation oncommand_insight active_iq_u…	napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-8174	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199095	7.8	HIGH Local	lenovo	drivers_management	An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-428 Unquoted Search Path or Element	CVE-2020-8326	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199096	7.8	HIGH Local	lenovo	drivers_management	A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-426 Untrusted Search Path	CVE-2020-8317	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199097	7.5	HIGH Network	servey_project	servey	A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.	CWE-22 Path Traversal	CVE-2020-8214	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199098	8.8	HIGH Network	automattic	canvas	A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.	CWE-120 Classic Buffer Overflow	CVE-2020-8215	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199099	7.5	HIGH Network	transloadit	uppy	The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interac…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8205	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199100	9.8	CRITICAL Network	jison_project	jison	Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.	CWE-78 OS Command	CVE-2020-8178	2024-11-21 14:38	2020-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed