Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248561	4.3	警告	エマソン	-	Emerson の DeltaV 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1814	2012-06-12 12:06	2012-05-30	Show	GitHub Exploit DB Packet Storm

248562	2.1	注意	GNOME Project Canonical	-	Ubuntu で使用されるアップデートマネージャにおけるリポジトリ認証情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0948	2012-06-11 16:20	2012-06-7	Show	GitHub Exploit DB Packet Storm

248563	7.8	危険	infradead	-	OpenConnect におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3291	2012-06-11 15:52	2012-06-7	Show	GitHub Exploit DB Packet Storm

248564	10	危険	Google サムスン日本エイサー	-	複数の製品の Chromebook プラットフォーム上で稼働する Google Chrome における脆弱性	CWE-noinfo 情報不足	CVE-2012-3290	2012-06-11 15:49	2012-06-4	Show	GitHub Exploit DB Packet Storm

248565	7.5	危険	s9y	-	Serendipity の include/functions_trackbacks.inc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2762	2012-06-11 15:40	2012-06-7	Show	GitHub Exploit DB Packet Storm

248566	4.3	警告	Sensio Labs	-	SensioLabs Symfony における Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2012-2667	2012-06-11 15:39	2012-06-7	Show	GitHub Exploit DB Packet Storm

248567	5.5	警告	MIT Kerberos	-	MIT Kerberos の kadmin プロトコルの実装における文字列属性を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1012	2012-06-11 15:22	2012-02-21	Show	GitHub Exploit DB Packet Storm

248568	9.3	危険	ソニー株式会社	-	複数の Sony 製品の Wireless Manager ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0985	2012-06-11 15:18	2012-06-7	Show	GitHub Exploit DB Packet Storm

248569	6.8	警告	Konstanty Bialkowski	-	libmodplug の CSoundFile::ReadAMS2 関数における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-2915	2012-06-11 15:14	2012-06-7	Show	GitHub Exploit DB Packet Storm

248570	6.8	警告	Konstanty Bialkowski	-	libmodplug の CSoundFile::ReadDSM 関数における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-2914	2012-06-11 14:21	2012-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199091	6.5	MEDIUM Network	fastify	fastify	A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted sche…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8192	2024-11-21 14:38	2020-07-30	Show	GitHub Exploit DB Packet Storm

199092	8.8	HIGH Network	citrix	workspace	Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.	CWE-287 Improper Authentication	CVE-2020-8207	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199093	5.5	MEDIUM Local	jpeg-js_project	jpeg-js	Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8175	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199094	8.1	HIGH Network	nodejs oracle netapp	node.js banking_extensibility_workbench retail_xstore_point_of_service mysql_cluster blockchain_platform snapcenter oncommand_workflow_automation oncommand_insight active_iq_u…	napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-8174	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199095	7.8	HIGH Local	lenovo	drivers_management	An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-428 Unquoted Search Path or Element	CVE-2020-8326	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199096	7.8	HIGH Local	lenovo	drivers_management	A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-426 Untrusted Search Path	CVE-2020-8317	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199097	7.5	HIGH Network	servey_project	servey	A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.	CWE-22 Path Traversal	CVE-2020-8214	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199098	8.8	HIGH Network	automattic	canvas	A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.	CWE-120 Classic Buffer Overflow	CVE-2020-8215	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199099	7.5	HIGH Network	transloadit	uppy	The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interac…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8205	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199100	9.8	CRITICAL Network	jison_project	jison	Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.	CWE-78 OS Command	CVE-2020-8178	2024-11-21 14:38	2020-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed