Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248821	7.6	危険	Opera Software ASA	-	Opera におけるクロスサイトスクリプティング攻撃を実行される脆弱性	CWE-noinfo 情報不足	CVE-2012-3555	2012-06-18 14:20	2012-06-14	Show	GitHub Exploit DB Packet Storm

248822	5.6	警告	ioquake3	-	ioquake3 における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2012-3345	2012-06-18 14:13	2012-06-14	Show	GitHub Exploit DB Packet Storm

248823	6	警告	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1843	2012-06-15 18:53	2012-03-22	Show	GitHub Exploit DB Packet Storm

248824	3.5	注意	クアンタムデル	-	Quantum Scalar i500 および Dell ML6000 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1842	2012-06-15 18:51	2012-03-22	Show	GitHub Exploit DB Packet Storm

248825	9.3	危険	マイクロソフト	-	Microsoft Windows のリモートデスクトッププロトコル (RDP) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0173	2012-06-15 17:34	2012-06-12	Show	GitHub Exploit DB Packet Storm

248826	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-1523	2012-06-15 17:32	2012-06-12	Show	GitHub Exploit DB Packet Storm

248827	9.3	危険	マイクロソフト	-	Microsoft Lync における権限昇格の脆弱性	CWE-Other その他	CVE-2012-1849	2012-06-15 17:31	2012-06-12	Show	GitHub Exploit DB Packet Storm

248828	9.3	危険	マイクロソフト	-	Microsoft .NET Framework における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-1855	2012-06-15 17:30	2012-06-12	Show	GitHub Exploit DB Packet Storm

248829	4.3	警告	マイクロソフト	-	Microsoft Dynamics AX におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1857	2012-06-15 17:29	2012-06-12	Show	GitHub Exploit DB Packet Storm

248830	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1864	2012-06-15 17:23	2012-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212981	8.8	HIGH Network	loway	queuemetrics	A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter.	CWE-89 SQL Injection	CVE-2020-15925	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212982	8.6	HIGH Local	vng	zalo_desktop	An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafte…	CWE-74 Injection	CVE-2020-16087	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212983	7.5	HIGH Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2020-15868	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212984	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove …	NVD-CWE-noinfo	CVE-2020-16139	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212985	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vul…	NVD-CWE-noinfo	CVE-2020-16138	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212986	9.8	CRITICAL Network	cisco	unified_ip_conference_station_7937g_firmware	A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Not…	NVD-CWE-noinfo	CVE-2020-16137	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212987	6.1	MEDIUM Network	roundcube fedoraproject	webmail fedora	Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15.	CWE-79 Cross-site Scripting	CVE-2020-16145	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

212988	7.5	HIGH Network	robotemi	temi	Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can …	CWE-798 Use of Hard-coded Credentials	CVE-2020-16170	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

212989	3.8	LOW Local	qemu debian canonical opensuse	qemu debian_linux ubuntu_linux leap	In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw t…	CWE-617 Reachable Assertion	CVE-2020-16092	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

212990	6.1	MEDIUM Network	jetbrains	teamcity	JetBrains TeamCity before 2019.2.3 is vulnerable to reflected XSS in the administration UI.	CWE-79 Cross-site Scripting	CVE-2020-15831	2024-11-21 14:06	2020-08-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed