Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248951 2.6 注意 株式会社バンダイナムコゲームス - 魔法少女まどか☆マギカ iP for Android における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2012-2630 2012-06-1 12:04 2012-06-1 Show GitHub Exploit DB Packet Storm
248952 7.5 危険 Segue Project - Segue における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1255 2012-06-1 12:03 2012-06-1 Show GitHub Exploit DB Packet Storm
248953 4.3 警告 Segue Project - Segue におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1254 2012-06-1 12:02 2012-06-1 Show GitHub Exploit DB Packet Storm
248954 7.5 危険 Jaow - Jaow の add_ons.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2952 2012-05-31 14:52 2012-05-29 Show GitHub Exploit DB Packet Storm
248955 7.5 危険 Plogger Project - Plogger の plog-rss.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2951 2012-05-31 14:52 2012-05-29 Show GitHub Exploit DB Packet Storm
248956 3.3 注意 Puppet - Puppet および Puppet Enterprise における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1906 2012-05-31 14:25 2012-05-29 Show GitHub Exploit DB Packet Storm
248957 4.3 警告 ikiwiki - ikiwiki のメタプラグイン (Plugin/meta.pm) におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0220 2012-05-31 14:15 2012-05-29 Show GitHub Exploit DB Packet Storm
248958 10 危険 ZTE - ZTE Score M デバイス上の Android 用 ZTE sync_agent プログラムにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2949 2012-05-31 14:11 2012-05-29 Show GitHub Exploit DB Packet Storm
248959 6.5 警告 Pligg - Pligg CMS の captcha モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2435 2012-05-30 11:22 2012-05-27 Show GitHub Exploit DB Packet Storm
248960 1.2 注意 ヒューレット・パッカード - HP Linux Imaging and Printing の send_data_to_stdout 関数における任意のファイルを上書される脆弱性 CWE-59
リンク解釈の問題
CVE-2011-2722 2012-05-29 16:10 2012-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200191 5.5 MEDIUM
Local
kubernetes kubernetes In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. Thi… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-8565 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
200192 5.5 MEDIUM
Local
kubernetes kubernetes In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secret… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-8564 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
200193 5.5 MEDIUM
Local
kubernetes kubernetes In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.… CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-8563 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
200194 5.3 MEDIUM
Adjacent
johnsoncontrols c-cure_web
victor_web
A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own J… CWE-287
Improper Authentication
CVE-2020-9049 2024-11-21 14:39 2020-11-20 Show GitHub Exploit DB Packet Storm
200195 8.1 HIGH
Network
amazon aws_encryption_sdk A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM (and other AEAD ciphers suc… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-8897 2024-11-21 14:39 2020-11-16 Show GitHub Exploit DB Packet Storm
200196 7.5 HIGH
Network
netapp hci
element_os
Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmis… NVD-CWE-noinfo
CVE-2020-8583 2024-11-21 14:39 2020-11-14 Show GitHub Exploit DB Packet Storm
200197 6.5 MEDIUM
Network
netapp hci
element_os
Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information. NVD-CWE-noinfo
CVE-2020-8582 2024-11-21 14:39 2020-11-14 Show GitHub Exploit DB Packet Storm
200198 6.5 MEDIUM
Network
intel data_center_manager Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access. CWE-20
 Improper Input Validation 
CVE-2020-8669 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm
200199 5.5 MEDIUM
Local
intel quartus_prime Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access. CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-8767 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm
200200 6.5 MEDIUM
Adjacent
intel software_guard_extensions_data_center_attestation_primitives Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access. CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2020-8766 2024-11-21 14:39 2020-11-13 Show GitHub Exploit DB Packet Storm