Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248781	7.8	危険	シスコシステムズ	-	Cisco Adaptive Security Appliances 5500 シリーズデバイスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2012-0378	2012-05-8 11:20	2012-05-3	Show	GitHub Exploit DB Packet Storm

248782	5	警告	シスコシステムズ	-	Cisco Unified Communications Manager の voice-sipstack コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-0376	2012-05-8 11:19	2012-05-3	Show	GitHub Exploit DB Packet Storm

248783	4.3	警告	シスコシステムズ	-	Cisco IOS の拡張 ACL 機能におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0362	2012-05-8 11:18	2012-05-2	Show	GitHub Exploit DB Packet Storm

248784	5	警告	シスコシステムズ	-	Cisco IP Communicator の SCCP プロトコルコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0361	2012-05-8 11:01	2012-05-2	Show	GitHub Exploit DB Packet Storm

248785	5	警告	シスコシステムズ	-	Cisco IOS における任意の IP アドレスからの TELNET 接続を確立される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0339	2012-05-8 10:58	2012-05-2	Show	GitHub Exploit DB Packet Storm

248786	5	警告	シスコシステムズ	-	Cisco IOS における任意の IP アドレスからの SSH 接続を確立される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0338	2012-05-8 10:56	2012-05-2	Show	GitHub Exploit DB Packet Storm

248787	5	警告	シスコシステムズ	-	Cisco Adaptive Security Appliances 5500 シリーズデバイスにおける重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-0335	2012-05-8 10:54	2012-05-2	Show	GitHub Exploit DB Packet Storm

248788	5	警告	シスコシステムズ	-	Cisco Small Business IP Phone の SPA 500 シリーズファームウェアにおける電話をかけられる脆弱性	CWE-287 不適切な認証	CVE-2012-0333	2012-05-8 10:39	2012-05-2	Show	GitHub Exploit DB Packet Storm

248789	3.5	注意	IBM	-	IBM Rational AppScan におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0737	2012-05-8 09:55	2012-05-3	Show	GitHub Exploit DB Packet Storm

248790	9.3	危険	IBM	-	IBM Rational AppScan における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-0736	2012-05-8 09:55	2012-05-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199601	6.5	MEDIUM Network	mozilla	thunderbird	When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird < 68.5.	CWE-908 Use of Uninitialized Resource	CVE-2020-6793	2024-11-21 14:36	2020-03-2	Show	GitHub Exploit DB Packet Storm

199602	4.3	MEDIUM Network	mozilla canonical	thunderbird ubuntu_linux	When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5.	CWE-908 CWE-909 Use of Uninitialized Resource Missing Initialization of Resource	CVE-2020-6792	2024-11-21 14:36	2020-03-2	Show	GitHub Exploit DB Packet Storm

199603	6.1	MEDIUM Network	mozilla	webthings_gateway	A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attack…	CWE-79 Cross-site Scripting	CVE-2020-6804	2024-11-21 14:36	2020-02-29	Show	GitHub Exploit DB Packet Storm

199604	6.1	MEDIUM Network	mozilla	webthings_gateway	An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.	CWE-601 Open Redirect	CVE-2020-6803	2024-11-21 14:36	2020-02-29	Show	GitHub Exploit DB Packet Storm

199605	5.3	MEDIUM Network	php tenable debian opensuse	php tenable.sc debian_linux leap	In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (06…	CWE-281 Improper Preservation of Permissions	CVE-2020-7063	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

199606	7.5	HIGH Network	php opensuse debian canonical	php leap debian_linux ubuntu_linux	In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set …	CWE-476 NULL Pointer Dereference	CVE-2020-7062	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

199607	9.1	CRITICAL Network	php tenable	php tenable.sc	In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated …	CWE-125 Out-of-bounds Read	CVE-2020-7061	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

199608	9.1	CRITICAL Network	openfortivpn_project fedoraproject opensuse	openfortivpn fedora leap backports_sle	An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonst…	CWE-295 Improper Certificate Validation	CVE-2020-7043	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

199609	5.3	MEDIUM Network	openfortivpn_project fedoraproject opensuse	openfortivpn fedora leap backports_sle	An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outco…	CWE-295 CWE-908 Improper Certificate Validation Use of Uninitialized Resource	CVE-2020-7042	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

199610	5.3	MEDIUM Network	openfortivpn_project fedoraproject opensuse	openfortivpn fedora leap backports_sle	An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a suc…	CWE-295 Improper Certificate Validation	CVE-2020-7041	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed