Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249011 5 警告 IBM - IBM Tivoli Directory Server におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0743 2012-04-24 16:20 2012-04-16 Show GitHub Exploit DB Packet Storm
249012 4.3 警告 IBM - IBM Tivoli Directory Server の Web Admin Tool におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0740 2012-04-24 16:18 2012-04-22 Show GitHub Exploit DB Packet Storm
249013 6.4 警告 IBM - IBM Tivoli Directory Server の TLS のデフォルト設定における非暗号化通信を誘発される脆弱性 CWE-310
暗号の問題
CVE-2012-0726 2012-04-24 16:15 2012-04-16 Show GitHub Exploit DB Packet Storm
249014 9.3 危険 IBM - IBM Rational ClearQuest の Ole API におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0708 2012-04-24 16:12 2012-04-22 Show GitHub Exploit DB Packet Storm
249015 4.4 警告 Debian - Debian GNU/Linux 上で稼働する apache2 におけるクロスサイトスクリプティング (XSS) 攻撃を誘発される脆弱性 CWE-DesignError
CVE-2012-0216 2012-04-24 16:05 2012-04-15 Show GitHub Exploit DB Packet Storm
249016 4.3 警告 TeamPass - TeamPass の sources/users.queries.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2234 2012-04-24 15:59 2012-04-22 Show GitHub Exploit DB Packet Storm
249017 4.3 警告 WordPress.org - WordPress の wp-comments-post.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2404 2012-04-24 15:51 2012-04-21 Show GitHub Exploit DB Packet Storm
249018 4.3 警告 WordPress.org - WordPress の wp-includes/formatting.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2403 2012-04-24 15:49 2012-04-21 Show GitHub Exploit DB Packet Storm
249019 5.5 警告 WordPress.org - WordPress の wp-admin/plugins.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2402 2012-04-24 15:43 2012-04-21 Show GitHub Exploit DB Packet Storm
249020 5 警告 WordPress.org
Moxiecode Systems
- WordPress および他の製品で使用される Plupload における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2401 2012-04-24 15:35 2012-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210591 5.4 MEDIUM
Network
midasolutions eframework Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting
CVE-2020-15918 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210592 9.8 CRITICAL
Network
claws-mail
fedoraproject
opensuse
claws-mail
fedora
leap
backports_sle
common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. NVD-CWE-noinfo
CVE-2020-15917 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210593 9.8 CRITICAL
Network
tenda ac15_firmware goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. CWE-78
OS Command 
CVE-2020-15916 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210594 6.5 MEDIUM
Adjacent
tesla model_3_firmware Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue NVD-CWE-noinfo
CVE-2020-15912 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
210595 8.8 HIGH
Network
softwareupdate_project softwareupdate A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter o… CWE-89
SQL Injection
CVE-2020-15887 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210596 8.8 HIGH
Network
reportdata_project reportdata A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/… CWE-89
SQL Injection
CVE-2020-15886 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210597 5.4 MEDIUM
Network
munkireport_project comment A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment. CWE-79
Cross-site Scripting
CVE-2020-15885 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210598 8.8 HIGH
Network
munkireport_project munkireport A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data. CWE-89
SQL Injection
CVE-2020-15884 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210599 6.1 MEDIUM
Network
managedinstalls_project managedinstalls A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (thr… CWE-79
Cross-site Scripting
CVE-2020-15883 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
210600 8.1 HIGH
Network
munkireport_project munkireport A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database. CWE-352
 Origin Validation Error
CVE-2020-15882 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm