Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248581 2.9 注意 Mozilla Foundation - 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-1945 2012-06-7 15:04 2012-06-5 Show GitHub Exploit DB Packet Storm
248582 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の CSP の実装におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1944 2012-06-7 15:00 2012-06-5 Show GitHub Exploit DB Packet Storm
248583 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限を取得される脆弱性 CWE-Other
その他
CVE-2012-1943 2012-06-7 14:54 2012-06-5 Show GitHub Exploit DB Packet Storm
248584 7.2 危険 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1942 2012-06-7 14:52 2012-06-5 Show GitHub Exploit DB Packet Storm
248585 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1941 2012-06-7 14:42 2012-06-5 Show GitHub Exploit DB Packet Storm
248586 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2012-1938 2012-06-7 14:25 2012-06-5 Show GitHub Exploit DB Packet Storm
248587 4.3 警告 NewsGator Technologies, Inc. - FeedDemon において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2634 2012-06-7 12:01 2012-06-7 Show GitHub Exploit DB Packet Storm
248588 4.3 警告 Sebastian Heinlein
Canonical
- Ubuntu で使用される Aptdaemon における任意のパッケージをインストールされる脆弱性 CWE-287
不適切な認証
CVE-2012-0944 2012-06-6 16:08 2012-06-4 Show GitHub Exploit DB Packet Storm
248589 6.5 警告 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5093 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
248590 7.5 危険 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5092 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199281 9.8 CRITICAL
Network
klona_project klona Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona. CWE-20
 Improper Input Validation 
CVE-2020-8125 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199282 5.3 MEDIUM
Network
url-parse_project url-parse Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. CWE-20
 Improper Input Validation 
CVE-2020-8124 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199283 4.9 MEDIUM
Network
strapi strapi A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-8123 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199284 4.3 MEDIUM
Network
nextcloud nextcloud_server A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received. CWE-20
 Improper Input Validation 
CVE-2020-8122 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199285 8.1 HIGH
Network
nextcloud nextcloud_server A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-8121 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199286 6.1 MEDIUM
Network
nextcloud nextcloud_server A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation. CWE-79
Cross-site Scripting
CVE-2020-8120 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199287 4.3 MEDIUM
Network
nextcloud nextcloud_server Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app. CWE-863
 Incorrect Authorization
CVE-2020-8119 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199288 5.0 MEDIUM
Network
nextcloud
novell
opensuse
nextcloud_server
suse_linux_enterprise_server
backports_sle
An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-8118 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199289 4.3 MEDIUM
Network
nextcloud nextcloud_server Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event. CWE-281
 Improper Preservation of Permissions
CVE-2020-8117 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199290 7.3 HIGH
Network
dot-prop_project dot-prop Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-8116 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm