Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249011 4.3 警告 OSQA - OSQA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1245 2012-04-26 12:03 2012-04-26 Show GitHub Exploit DB Packet Storm
249012 4 警告 株式会社NTTドコモ - spモードメールアプリにおける SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他
CVE-2012-1244 2012-04-26 12:02 2012-04-26 Show GitHub Exploit DB Packet Storm
249013 10 危険 Bharat Mediratta - Gallery における暗号化の処理に関する脆弱性 CWE-310
暗号の問題
CVE-2012-2405 2012-04-24 16:30 2012-04-3 Show GitHub Exploit DB Packet Storm
249014 4.3 警告 Cumin - Cumin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1575 2012-04-24 16:27 2012-04-22 Show GitHub Exploit DB Packet Storm
249015 4.6 警告 NVIDIA - NVIDIA UNIX ドライバにおける任意のメモリ領域にアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0946 2012-04-24 16:23 2012-04-4 Show GitHub Exploit DB Packet Storm
249016 5 警告 IBM - IBM Tivoli Directory Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0743 2012-04-24 16:20 2012-04-16 Show GitHub Exploit DB Packet Storm
249017 4.3 警告 IBM - IBM Tivoli Directory Server の Web Admin Tool におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0740 2012-04-24 16:18 2012-04-22 Show GitHub Exploit DB Packet Storm
249018 6.4 警告 IBM - IBM Tivoli Directory Server の TLS のデフォルト設定における非暗号化通信を誘発される脆弱性 CWE-310
暗号の問題
CVE-2012-0726 2012-04-24 16:15 2012-04-16 Show GitHub Exploit DB Packet Storm
249019 9.3 危険 IBM - IBM Rational ClearQuest の Ole API におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0708 2012-04-24 16:12 2012-04-22 Show GitHub Exploit DB Packet Storm
249020 4.4 警告 Debian - Debian GNU/Linux 上で稼働する apache2 におけるクロスサイトスクリプティング (XSS) 攻撃を誘発される脆弱性 CWE-DesignError
CVE-2012-0216 2012-04-24 16:05 2012-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210431 8.8 HIGH
Network
piwigo piwigo SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. CWE-89
SQL Injection
CVE-2020-19215 2024-11-21 14:09 2022-05-6 Show GitHub Exploit DB Packet Storm
210432 9.8 CRITICAL
Network
piwigo piwigo SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. CWE-89
SQL Injection
CVE-2020-19213 2024-11-21 14:09 2022-05-6 Show GitHub Exploit DB Packet Storm
210433 4.9 MEDIUM
Network
piwigo piwigo SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. CWE-89
SQL Injection
CVE-2020-19212 2024-11-21 14:09 2022-05-6 Show GitHub Exploit DB Packet Storm
210434 9.8 CRITICAL
Network
jeesite jeesite Jeesite 1.2.7 uses the apache shiro version 1.2.3 affected by CVE-2016-4437. Because of this version of the java deserialization vulnerability, an attacker could exploit the vulnerability to execute … CWE-502
 Deserialization of Untrusted Data
CVE-2020-19229 2024-11-21 14:09 2022-04-6 Show GitHub Exploit DB Packet Storm
210435 7.5 HIGH
Network
nlnetlabs ldns When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_r… CWE-125
Out-of-bounds Read
CVE-2020-19861 2024-11-21 14:09 2022-01-22 Show GitHub Exploit DB Packet Storm
210436 6.5 MEDIUM
Network
nlnetlabs ldns When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zon… CWE-125
Out-of-bounds Read
CVE-2020-19860 2024-11-21 14:09 2022-01-21 Show GitHub Exploit DB Packet Storm
210437 7.5 HIGH
Network
plutinosoft platinum Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to compromise a victim's privacy. CWE-22
Path Traversal
CVE-2020-19858 2024-11-21 14:09 2022-01-21 Show GitHub Exploit DB Packet Storm
210438 5.4 MEDIUM
Network
wuzhicms wuzhi_cms A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie. CWE-79
Cross-site Scripting
CVE-2020-19770 2024-11-21 14:09 2021-12-22 Show GitHub Exploit DB Packet Storm
210439 8.8 HIGH
Network
laravel framework OS Command injection vulnerability in function link in Filesystem.php in Laravel Framework before 5.8.17. CWE-78
OS Command 
CVE-2020-19316 2024-11-21 14:09 2021-12-21 Show GitHub Exploit DB Packet Storm
210440 5.4 MEDIUM
Network
zzzcms zzzcms A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. CWE-79
Cross-site Scripting
CVE-2020-19683 2024-11-21 14:09 2021-12-10 Show GitHub Exploit DB Packet Storm