Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248881 4.3 警告 ForeScout Technologies - ForeScout CounterACT にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1825 2012-06-13 11:43 2012-06-11 Show GitHub Exploit DB Packet Storm
248882 6 警告 dotCMS - dotCMS に任意のコードが実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1826 2012-06-12 15:54 2012-05-28 Show GitHub Exploit DB Packet Storm
248883 6.5 警告 CollabNet, Inc. - ScrumWorks Pro に権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2603 2012-06-12 15:51 2012-06-8 Show GitHub Exploit DB Packet Storm
248884 5 警告 Igor Sysoev - nginx における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2012-1180 2012-06-12 15:48 2012-04-17 Show GitHub Exploit DB Packet Storm
248885 6.8 警告 Bloxx - Bloxx Web Filtering で使用される Microdasys におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-3343 2012-06-12 15:23 2011-06-9 Show GitHub Exploit DB Packet Storm
248886 5 警告 Bloxx - Bloxx Web Filtering における IP アドレスとドメインの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2566 2012-06-12 15:19 2011-06-9 Show GitHub Exploit DB Packet Storm
248887 5.8 警告 Bloxx - Bloxx Web Filtering における平文パスワードを容易に推測される脆弱 CWE-264
認可・権限・アクセス制御
CVE-2012-2565 2012-06-12 15:17 2011-06-9 Show GitHub Exploit DB Packet Storm
248888 6.8 警告 Bloxx - Bloxx Web Filtering の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2564 2012-06-12 15:14 2011-06-9 Show GitHub Exploit DB Packet Storm
248889 4.3 警告 Bloxx - Bloxx Web Filtering におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2563 2012-06-12 15:10 2011-06-9 Show GitHub Exploit DB Packet Storm
248890 5.8 警告 シーメンス - Siemens WinCC の Web アプリケーションにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-3003 2012-06-12 14:31 2012-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210491 6.1 MEDIUM
Network
flexmonster pivot_table_\&_charts Cross Site Scripting (XSS) vulnerability in the Remote JSON component Under the Connect menu in Flexmonster Pivot Table & Charts 2.7.17. CWE-79
Cross-site Scripting
CVE-2020-20139 2024-11-21 14:11 2020-12-18 Show GitHub Exploit DB Packet Storm
210492 6.1 MEDIUM
Network
cmsmadesimple cms_made_simple Cross Site Scripting (XSS) vulnerability in the Showtime2 Slideshow module in CMS Made Simple (CMSMS) 2.2.4. CWE-79
Cross-site Scripting
CVE-2020-20138 2024-11-21 14:11 2020-12-18 Show GitHub Exploit DB Packet Storm
210493 9.8 CRITICAL
Network
newpk_project newpk SQL Injection vulnerability in NewPK 1.1 via the title parameter to admin\newpost.php. CWE-89
SQL Injection
CVE-2020-20189 2024-11-21 14:11 2020-12-15 Show GitHub Exploit DB Packet Storm
210494 9.8 CRITICAL
Network
liftoffsoftware gateone GateOne allows remote attackers to execute arbitrary commands via shell metacharacters in the port field when attempting an SSH connection. CWE-78
OS Command 
CVE-2020-20184 2024-11-21 14:11 2020-12-15 Show GitHub Exploit DB Packet Storm
210495 7.5 HIGH
Network
zyxel p1302-t10_v3_firmware Insecure direct object reference vulnerability in Zyxel’s P1302-T10 v3 with firmware version 2.00(ABBX.3) and earlier allows attackers to gain privileges and access certain admin pages. CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2020-20183 2024-11-21 14:11 2020-12-15 Show GitHub Exploit DB Packet Storm
210496 9.8 CRITICAL
Network
quantconnect lean QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library. CWE-502
 Deserialization of Untrusted Data
CVE-2020-20136 2024-11-21 14:11 2020-12-15 Show GitHub Exploit DB Packet Storm
210497 5.9 MEDIUM
Network
openssl
debian
fedoraproject
oracle
netapp
tenable
siemens
nodejs
openssl
debian_linux
fedora
api_gateway
peoplesoft_enterprise_peopletools
business_intelligence
jd_edwards_world_security
enterprise_manager_base_platform
http_server
enter…
The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares d… CWE-476
 NULL Pointer Dereference
CVE-2020-1971 2024-11-21 14:11 2020-12-9 Show GitHub Exploit DB Packet Storm
210498 4.3 MEDIUM
Network
otrs otrs When OTRS uses multiple backends for user authentication (with LDAP), agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions. CWE-287
Improper Authentication
CVE-2020-1778 2024-11-21 14:11 2020-11-24 Show GitHub Exploit DB Packet Storm
210499 7.5 HIGH
Network
huawei nip6300_firmware
nip6600_firmware
secospace_usg6300_firmware
secospace_usg6500_firmware
secospace_usg6600_firmware
usg9500_firmware
There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scen… NVD-CWE-noinfo
CVE-2020-1847 2024-11-21 14:11 2020-11-14 Show GitHub Exploit DB Packet Storm
210500 5.3 MEDIUM
Network
paloaltonetworks pan-os A vulnerability exists in the Palo Alto Network PAN-OS signature-based threat detection engine that allows an attacker to communicate with devices in the network in a way that is not analyzed for thr… CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2020-1999 2024-11-21 14:11 2020-11-12 Show GitHub Exploit DB Packet Storm