Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248911 10 危険 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバおける不特定の機能を実行される脆弱性 CWE-287
不適切な認証 		CVE-2012-1808 2012-04-17 16:52 2012-04-11 Show GitHub Exploit DB Packet Storm
248912 4.3 警告 光洋電子工業 - 複数の光洋電子工業社製品の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1807 2012-04-17 16:51 2012-04-11 Show GitHub Exploit DB Packet Storm
248913 7.5 危険 光洋電子工業 - 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2012-1806 2012-04-17 16:50 2012-04-11 Show GitHub Exploit DB Packet Storm
248914 10 危険 光洋電子工業 - 複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1805 2012-04-17 16:47 2012-04-11 Show GitHub Exploit DB Packet Storm
248915 7.5 危険 libarchive - libarchive におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1779 2012-04-17 16:46 2012-04-13 Show GitHub Exploit DB Packet Storm
248916 7.5 危険 libarchive - libarchive におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4666 2012-04-17 16:29 2012-04-13 Show GitHub Exploit DB Packet Storm
248917 9.3 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird における権限を取得される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3655 2012-04-16 18:09 2011-11-8 Show GitHub Exploit DB Packet Storm
248918 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3654 2012-04-16 18:07 2011-11-8 Show GitHub Exploit DB Packet Storm
248919 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3652 2012-04-16 17:16 2011-11-8 Show GitHub Exploit DB Packet Storm
248920 10 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-3651 2012-04-16 17:14 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198771 4.9 MEDIUM
Network 		snyk broker This affects the package snyk-broker before 4.73.0. It allows arbitrary file reads for users with access to Snyk's internal network via directory traversal. CWE-22
Path Traversal 		CVE-2020-7649 2024-11-21 14:37 2022-07-25 Show GitHub Exploit DB Packet Storm
198772 7.8 HIGH
Local 		grunt-util-property_project grunt-util-property This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7641 2024-11-21 14:37 2022-07-17 Show GitHub Exploit DB Packet Storm
198773 8.8 HIGH
Network 		schneider-electric modicon_m340_bmxp342020_firmware
140cpu65_firmware
tsxp57_firmware
bmxnoc0401_firmware
bmxnoe01_firmware
bmxnor0200h_firmware
140noe77111_firmware
140noc78000_firmware
tsxety5… 		A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists on the web server used, that could cause a leak of sensitive data or unauthorized actions on the web server during the time the user … CWE-352
 Origin Validation Error 		CVE-2020-7534 2024-11-21 14:37 2022-02-5 Show GitHub Exploit DB Packet Storm
198774 9.8 CRITICAL
Network 		wowsoft printchaser Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. … CWE-494
 Download of Code Without Integrity Check 		CVE-2020-7883 2024-11-21 14:37 2021-12-29 Show GitHub Exploit DB Packet Storm
198775 9.8 CRITICAL
Network 		4nb videooffice An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9 and earlier versions (CVE-2020-7878). This issue is due to missing support for integrity check. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-7878 2024-11-21 14:37 2021-12-29 Show GitHub Exploit DB Packet Storm
198776 8.8 HIGH
Network 		douzone neors The vulnerabilty was discovered in ActiveX module related to NeoRS remote support program. This issue allows an remote attacker to download and execute remote file. It is because of improper paramete… CWE-20
 Improper Input Validation  		CVE-2020-7880 2024-11-21 14:37 2021-12-1 Show GitHub Exploit DB Packet Storm
198777 9.8 CRITICAL
Network 		iptime c200_firmware This issue was discovered when the ipTIME C200 IP Camera was synchronized with the ipTIME NAS. It is necessary to extract value for ipTIME IP camera because the ipTIME NAS send ans setCookie('[COOKIE… CWE-78
OS Command  		CVE-2020-7879 2024-11-21 14:37 2021-12-1 Show GitHub Exploit DB Packet Storm
198778 8.8 HIGH
Network 		afreecatv afreecatv The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code executi… CWE-787
 Out-of-bounds Write 		CVE-2020-7881 2024-11-21 14:37 2021-11-27 Show GitHub Exploit DB Packet Storm
198779 9.1 CRITICAL
Network 		hancom anysign4pc Using the parameter of getPFXFolderList function, attackers can see the information of authorization certification and delete the files. It occurs because the parameter contains path traversal charac… CWE-22
Path Traversal 		CVE-2020-7882 2024-11-21 14:37 2021-11-23 Show GitHub Exploit DB Packet Storm
198780 8.8 HIGH
Network 		dext5 dext5upload DEXT5 Upload 5.0.0.117 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote file by setting the argument, variable in the activeX module. Thi… CWE-494
 Download of Code Without Integrity Check 		CVE-2020-7875 2024-11-21 14:37 2021-10-29 Show GitHub Exploit DB Packet Storm