Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249011 5 警告 IBM - IBM Tivoli Directory Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0743 2012-04-24 16:20 2012-04-16 Show GitHub Exploit DB Packet Storm
249012 4.3 警告 IBM - IBM Tivoli Directory Server の Web Admin Tool におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0740 2012-04-24 16:18 2012-04-22 Show GitHub Exploit DB Packet Storm
249013 6.4 警告 IBM - IBM Tivoli Directory Server の TLS のデフォルト設定における非暗号化通信を誘発される脆弱性 CWE-310
暗号の問題 		CVE-2012-0726 2012-04-24 16:15 2012-04-16 Show GitHub Exploit DB Packet Storm
249014 9.3 危険 IBM - IBM Rational ClearQuest の Ole API におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-0708 2012-04-24 16:12 2012-04-22 Show GitHub Exploit DB Packet Storm
249015 4.4 警告 Debian - Debian GNU/Linux 上で稼働する apache2 におけるクロスサイトスクリプティング (XSS) 攻撃を誘発される脆弱性 CWE-DesignError
CVE-2012-0216 2012-04-24 16:05 2012-04-15 Show GitHub Exploit DB Packet Storm
249016 4.3 警告 TeamPass - TeamPass の sources/users.queries.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2234 2012-04-24 15:59 2012-04-22 Show GitHub Exploit DB Packet Storm
249017 4.3 警告 WordPress.org - WordPress の wp-comments-post.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2404 2012-04-24 15:51 2012-04-21 Show GitHub Exploit DB Packet Storm
249018 4.3 警告 WordPress.org - WordPress の wp-includes/formatting.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2403 2012-04-24 15:49 2012-04-21 Show GitHub Exploit DB Packet Storm
249019 5.5 警告 WordPress.org - WordPress の wp-admin/plugins.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2402 2012-04-24 15:43 2012-04-21 Show GitHub Exploit DB Packet Storm
249020 5 警告 WordPress.org
Moxiecode Systems		 - WordPress および他の製品で使用される Plupload における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2401 2012-04-24 15:35 2012-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210581 5.5 MEDIUM
Local 		lua lua Lua through 5.4.0 has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly expects that an oldpc value is always updated upon a return of the f… NVD-CWE-Other
CVE-2020-15945 2024-11-21 14:06 2020-07-25 Show GitHub Exploit DB Packet Storm
210582 8.8 HIGH
Network 		overwolf overwolf Overwolf before 0.149.2.30 mishandles Symbolic Links during updates, causing elevation of privileges. CWE-59
Link Following 		CVE-2020-15932 2024-11-21 14:06 2020-07-25 Show GitHub Exploit DB Packet Storm
210583 9.9 CRITICAL
Network 		parallels remote_application_server Parallels Remote Application Server (RAS) 17.1.1 has a Business Logic Error causing remote code execution. It allows an authenticated user to execute any application in the backend operating system t… NVD-CWE-Other
CVE-2020-15860 2024-11-21 14:06 2020-07-25 Show GitHub Exploit DB Packet Storm
210584 7.8 HIGH
Local 		openbsd
netapp
broadcom 		openssh
a700s_firmware
steelstore_cloud_integrated_storage
active_iq_unified_manager
solidfire
hci_management_node
hci_storage_node
hci_compute_node
fabric_operating_system 		scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that t… CWE-78
OS Command  		CVE-2020-15778 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210585 7.5 HIGH
Network 		midasolutions eframework There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters. CWE-89
SQL Injection 		CVE-2020-15924 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210586 7.5 HIGH
Network 		midasolutions eframework Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. CWE-22
Path Traversal 		CVE-2020-15923 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210587 9.8 CRITICAL
Network 		midasolutions eframework There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required. CWE-78
OS Command  		CVE-2020-15922 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210588 9.8 CRITICAL
Network 		midasolutions eframework Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution. CWE-287
Improper Authentication 		CVE-2020-15921 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210589 9.8 CRITICAL
Network 		midasolutions eframework There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required. CWE-78
OS Command  		CVE-2020-15920 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210590 6.1 MEDIUM
Network 		midasolutions eframework A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting 		CVE-2020-15919 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm