Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248991 5 警告 ヒューレット・パッカード - HP Onboard Administrator における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0130 2012-04-9 09:59 2012-04-2 Show GitHub Exploit DB Packet Storm
248992 7.6 危険 ヒューレット・パッカード - HP Onboard Administrator におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0129 2012-04-9 09:55 2012-04-2 Show GitHub Exploit DB Packet Storm
248993 5.8 警告 ヒューレット・パッカード - HP Onboard Administrator におけるユーザを任意の Web サイトにリダイレクトされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0128 2012-04-9 09:51 2012-04-2 Show GitHub Exploit DB Packet Storm
248994 5 警告 GitHub - GitHub Enterprise における public_key[user_id] の値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2055 2012-04-6 16:21 2012-04-4 Show GitHub Exploit DB Packet Storm
248995 5 警告 Redmine - Redmine における属性を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2054 2012-04-6 16:21 2012-03-6 Show GitHub Exploit DB Packet Storm
248996 5 警告 Spree Commerce - Spree のセッション Cookie ストアの実装における暗号保護メカニズムを容易に回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7311 2012-04-6 16:19 2008-08-12 Show GitHub Exploit DB Packet Storm
248997 5 警告 Spree Commerce - Spree における Order ステートの値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7310 2012-04-6 16:16 2008-09-16 Show GitHub Exploit DB Packet Storm
248998 5 警告 Insoshi - Insoshi における ForumPost user_id の値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7309 2012-04-6 16:15 2008-09-21 Show GitHub Exploit DB Packet Storm
248999 3.5 注意 OpenBSD - OpenSSH の gss-serv.c 内の ssh_gssapi_parse_ename 関数におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-5000 2012-04-6 16:00 2012-04-5 Show GitHub Exploit DB Packet Storm
249000 7.2 危険 F5 Networks - F5 FirePass の sudoers ファイルにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2053 2012-04-6 15:53 2012-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197851 3.5 LOW
Adjacent 		google gerrit An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verificat… NVD-CWE-Other
CVE-2020-8920 2024-11-21 14:39 2020-12-10 Show GitHub Exploit DB Packet Storm
197852 3.5 LOW
Adjacent 		google gerrit An information leak vulnerability exists in Gerrit versions prior to 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where a missing access check on the branch REST API allows an attacker with only the defau… CWE-863
 Incorrect Authorization 		CVE-2020-8919 2024-11-21 14:39 2020-12-10 Show GitHub Exploit DB Packet Storm
197853 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during p… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8566 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
197854 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. This can occur both in API server logs and client tool output like kubectl. Thi… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8565 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
197855 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secret… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8564 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
197856 5.5 MEDIUM
Local 		kubernetes kubernetes In Kubernetes clusters using VSphere as a cloud provider, with a logging level set to 4 or above, VSphere cloud credentials will be leaked in the cloud controller manager's log. This affects < v1.19.… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-8563 2024-11-21 14:39 2020-12-8 Show GitHub Exploit DB Packet Storm
197857 5.3 MEDIUM
Adjacent 		johnsoncontrols c-cure_web
victor_web 		A vulnerability in specified versions of American Dynamics victor Web Client and Software House C•CURE Web Client could allow an unauthenticated attacker on the network to create and sign their own J… CWE-287
Improper Authentication 		CVE-2020-9049 2024-11-21 14:39 2020-11-20 Show GitHub Exploit DB Packet Storm
197858 8.1 HIGH
Network 		amazon aws_encryption_sdk A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM (and other AEAD ciphers suc… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-8897 2024-11-21 14:39 2020-11-16 Show GitHub Exploit DB Packet Storm
197859 7.5 HIGH
Network 		netapp hci
element_os 		Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an attacker to discover sensitive information by intercepting its transmis… NVD-CWE-noinfo
CVE-2020-8583 2024-11-21 14:39 2020-11-14 Show GitHub Exploit DB Packet Storm
197860 6.5 MEDIUM
Network 		netapp hci
element_os 		Element Software versions prior to 12.2 and HCI versions prior to 1.8P1 are susceptible to a vulnerability which could allow an authenticated user to view sensitive information. NVD-CWE-noinfo
CVE-2020-8582 2024-11-21 14:39 2020-11-14 Show GitHub Exploit DB Packet Storm