Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248611	7.5	危険	Jaow	-	Jaow の add_ons.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2952	2012-05-31 14:52	2012-05-29	Show	GitHub Exploit DB Packet Storm

248612	7.5	危険	Plogger Project	-	Plogger の plog-rss.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2951	2012-05-31 14:52	2012-05-29	Show	GitHub Exploit DB Packet Storm

248613	3.3	注意	Puppet	-	Puppet および Puppet Enterprise における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1906	2012-05-31 14:25	2012-05-29	Show	GitHub Exploit DB Packet Storm

248614	4.3	警告	ikiwiki	-	ikiwiki のメタプラグイン (Plugin/meta.pm) におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0220	2012-05-31 14:15	2012-05-29	Show	GitHub Exploit DB Packet Storm

248615	10	危険	ZTE	-	ZTE Score M デバイス上の Android 用 ZTE sync_agent プログラムにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2949	2012-05-31 14:11	2012-05-29	Show	GitHub Exploit DB Packet Storm

248616	6.5	警告	Pligg	-	Pligg CMS の captcha モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2435	2012-05-30 11:22	2012-05-27	Show	GitHub Exploit DB Packet Storm

248617	1.2	注意	ヒューレット・パッカード	-	HP Linux Imaging and Printing の send_data_to_stdout 関数における任意のファイルを上書される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-2722	2012-05-29 16:10	2012-05-25	Show	GitHub Exploit DB Packet Storm

248618	10	危険	xArrow	-	xArrow のサーバ機能における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2012-2429	2012-05-29 15:57	2012-05-24	Show	GitHub Exploit DB Packet Storm

248619	10	危険	xArrow	-	xArrow のサーバ機能における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-2428	2012-05-29 15:56	2012-05-24	Show	GitHub Exploit DB Packet Storm

248620	10	危険	xArrow	-	xArrow のサーバ機能におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2427	2012-05-29 15:54	2012-05-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199091	6.5	MEDIUM Network	fastify	fastify	A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted sche…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8192	2024-11-21 14:38	2020-07-30	Show	GitHub Exploit DB Packet Storm

199092	8.8	HIGH Network	citrix	workspace	Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.	CWE-287 Improper Authentication	CVE-2020-8207	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199093	5.5	MEDIUM Local	jpeg-js_project	jpeg-js	Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8175	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199094	8.1	HIGH Network	nodejs oracle netapp	node.js banking_extensibility_workbench retail_xstore_point_of_service mysql_cluster blockchain_platform snapcenter oncommand_workflow_automation oncommand_insight active_iq_u…	napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-8174	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199095	7.8	HIGH Local	lenovo	drivers_management	An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-428 Unquoted Search Path or Element	CVE-2020-8326	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199096	7.8	HIGH Local	lenovo	drivers_management	A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-426 Untrusted Search Path	CVE-2020-8317	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

199097	7.5	HIGH Network	servey_project	servey	A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.	CWE-22 Path Traversal	CVE-2020-8214	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199098	8.8	HIGH Network	automattic	canvas	A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.	CWE-120 Classic Buffer Overflow	CVE-2020-8215	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199099	7.5	HIGH Network	transloadit	uppy	The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interac…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8205	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

199100	9.8	CRITICAL Network	jison_project	jison	Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.	CWE-78 OS Command	CVE-2020-8178	2024-11-21 14:38	2020-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed