Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248821 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2421 2012-04-27 15:03 2012-04-25 Show GitHub Exploit DB Packet Storm
248822 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-2420 2012-04-27 15:02 2012-04-25 Show GitHub Exploit DB Packet Storm
248823 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2419 2012-04-27 15:00 2012-04-25 Show GitHub Exploit DB Packet Storm
248824 6.8 警告 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2418 2012-04-27 14:49 2012-04-25 Show GitHub Exploit DB Packet Storm
248825 4.6 警告 サイバートラスト株式会社
Net_SSLeay
Canonical
- Perl モジュール Net::SSLeay.pm の entropy ソースの扱いに関する脆弱性 - CVE-2005-0106 2012-04-27 14:12 2005-05-3 Show GitHub Exploit DB Packet Storm
248826 4.3 警告 osCommerce - osCommerce におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0312 2012-04-26 16:56 2012-01-20 Show GitHub Exploit DB Packet Storm
248827 2.6 注意 Mozilla Foundation - 複数の Mozilla 製品における IPv6 リテラルのアクセス制御リスト (ACL) を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0475 2012-04-26 16:00 2012-04-24 Show GitHub Exploit DB Packet Storm
248828 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の cairo-dwrite 実装におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2012-0472 2012-04-26 15:51 2012-04-24 Show GitHub Exploit DB Packet Storm
248829 4.3 警告 OSQA - OSQA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1245 2012-04-26 12:03 2012-04-26 Show GitHub Exploit DB Packet Storm
248830 4 警告 株式会社NTTドコモ - spモードメールアプリにおける SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他
CVE-2012-1244 2012-04-26 12:02 2012-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211941 9.8 CRITICAL
Network
airforce nitf_extract_utility U.S. Air Force Sensor Data Management System extract75 has a buffer overflow that leads to code execution. An overflow in a global variable (sBuffer) leads to a Write-What-Where outcome. Writing beyo… CWE-787
 Out-of-bounds Write
CVE-2020-13995 2024-11-21 14:02 2020-09-25 Show GitHub Exploit DB Packet Storm
211942 7.5 HIGH
Network
jerryscript jerryscript vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register. NVD-CWE-noinfo
CVE-2020-13991 2024-11-21 14:02 2020-09-25 Show GitHub Exploit DB Packet Storm
211943 7.2 HIGH
Network
ozeki ozeki_ng_sms_gateway An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The outbox functionality of the TXT File module can be used to delete all/most files in a folder. Because the product usually runs as N… NVD-CWE-noinfo
CVE-2020-14031 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211944 7.2 HIGH
Network
ozeki ozeki_ng_sms_gateway An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker may write to or overwrite arbitrary fil… CWE-22
Path Traversal
CVE-2020-14028 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211945 5.3 MEDIUM
Network
ozeki ozeki_ng_sms_gateway An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. The database connection strings accept custom unsafe arguments, such as ENABLE_LOCAL_INFILE, that can be leveraged by attackers to enab… CWE-88
Argument Injection
CVE-2020-14027 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211946 8.8 HIGH
Network
ozeki ozeki_ng_sms_gateway CSV Injection (aka Excel Macro Injection or Formula Injection) exists in the Export Of Contacts feature in Ozeki NG SMS Gateway through 4.17.6 via a value that is mishandled in a CSV export. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-14026 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211947 8.8 HIGH
Network
ozeki ozeki_ng_sms_gateway Ozeki NG SMS Gateway through 4.17.6 has multiple CSRF vulnerabilities. For example, an administrator, by following a link, can be tricked into making unwanted changes such as installing new modules o… CWE-352
 Origin Validation Error
CVE-2020-14025 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211948 6.1 MEDIUM
Network
ozeki ozeki_ng_sms_gateway Ozeki NG SMS Gateway through 4.17.6 has multiple authenticated stored and/or reflected XSS vulnerabilities via the (1) Receiver or Recipient field in the Mailbox feature, (2) OZFORM_GROUPNAME field i… CWE-79
Cross-site Scripting
CVE-2020-14024 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211949 4.9 MEDIUM
Network
ozeki ozeki_ng_sms_gateway Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-14023 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm
211950 8.8 HIGH
Network
ozeki ozeki_ng_sms_gateway Ozeki NG SMS Gateway 4.17.1 through 4.17.6 does not check the file type when bulk importing new contacts ("Import Contacts" functionality) from a file. It is possible to upload an executable or .bat … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-14022 2024-11-21 14:02 2020-09-23 Show GitHub Exploit DB Packet Storm