Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249021	4.3	警告	Nancy Wichmann	-	Drupal 用 Glossary モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2339	2012-05-23 19:00	2012-05-21	Show	GitHub Exploit DB Packet Storm

249022	2.6	注意	Ishmael Sanchez	-	Drupal 用 Aberdeen テーマの aberdeen_breadcrumb 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2907	2012-05-23 18:57	2012-05-21	Show	GitHub Exploit DB Packet Storm

249023	5	警告	mark pilgrim	-	Universal Feed Parser におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-2921	2012-05-23 18:50	2012-05-2	Show	GitHub Exploit DB Packet Storm

249024	4.3	警告	Weston Ruter	-	WordPress 用 User Photo プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2920	2012-05-23 18:48	2012-05-21	Show	GitHub Exploit DB Packet Storm

249025	4.3	警告	Andrew Killen	-	WordPress 用 Share and Follow プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2917	2012-05-23 18:47	2012-05-21	Show	GitHub Exploit DB Packet Storm

249026	4.3	警告	dlo	-	WordPress 用 Sabre プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2916	2012-05-23 18:46	2012-05-21	Show	GitHub Exploit DB Packet Storm

249027	4.3	警告	Hind	-	WordPress 用 Leaflet プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2913	2012-05-23 18:41	2012-05-21	Show	GitHub Exploit DB Packet Storm

249028	4.3	警告	Kolja Schleich	-	WordPress 用 LeagueManager プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2912	2012-05-23 18:25	2012-05-21	Show	GitHub Exploit DB Packet Storm

249029	5	警告	Chevereto Software	-	Chevereto の Upload/engine.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2919	2012-05-23 18:19	2012-05-21	Show	GitHub Exploit DB Packet Storm

249030	4.3	警告	Chevereto Software	-	Chevereto の Upload/engine.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2918	2012-05-23 18:18	2012-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212861	8.8	HIGH Network	librenms	librenms	An issue was discovered in LibreNMS before 1.65.1. It has insufficient access control for normal users because of "'guard' => 'admin'" instead of "'middleware' => ['can:admin']" in routes/web.php.	NVD-CWE-noinfo	CVE-2020-15877	2024-11-21 14:06	2020-07-22	Show	GitHub Exploit DB Packet Storm

212862	6.5	MEDIUM Network	librenms	librenms	In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.	CWE-89 SQL Injection	CVE-2020-15873	2024-11-21 14:06	2020-07-22	Show	GitHub Exploit DB Packet Storm

212863	3.3	LOW Local	qemu debian	qemu debian_linux	QEMU 4.2.0 has a use-after-free in hw/net/e1000e_core.c because a guest OS user can trigger an e1000e packet with the data's address set to the e1000e's MMIO address.	CWE-416 Use After Free	CVE-2020-15859	2024-11-21 14:06	2020-07-22	Show	GitHub Exploit DB Packet Storm

212864	9.8	CRITICAL Network	mruby debian	mruby debian_linux	mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggered via the stack_copy function.	CWE-787 Out-of-bounds Write	CVE-2020-15866	2024-11-21 14:06	2020-07-22	Show	GitHub Exploit DB Packet Storm

212865	7.8	HIGH Local	linux xen netapp	linux_kernel xen cloud_backup steelstore_cloud_integrated_storage solidfire_baseboard_management_controller	An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs b…	CWE-276 Incorrect Default Permissions	CVE-2020-15852	2024-11-21 14:06	2020-07-21	Show	GitHub Exploit DB Packet Storm

212866	8.1	HIGH Network	liferay	liferay_portal dxp	Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serial…	CWE-502 Deserialization of Untrusted Data	CVE-2020-15842	2024-11-21 14:06	2020-07-20	Show	GitHub Exploit DB Packet Storm

212867	8.8	HIGH Network	liferay	liferay_portal dxp	Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attacke…	NVD-CWE-noinfo	CVE-2020-15841	2024-11-21 14:06	2020-07-20	Show	GitHub Exploit DB Packet Storm

212868	8.8	HIGH Network	westerndigital	wd_discovery	In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-15816	2024-11-21 14:06	2020-07-18	Show	GitHub Exploit DB Packet Storm

212869	6.5	MEDIUM Network	gnu	libredwg	GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.	CWE-476 NULL Pointer Dereference	CVE-2020-15807	2024-11-21 14:06	2020-07-18	Show	GitHub Exploit DB Packet Storm

212870	8.1	HIGH Network	graylog	graylog	Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database stored in LDAP. The connection configuration allows the usage of unencrypted, …	CWE-295 Improper Certificate Validation	CVE-2020-15813	2024-11-21 14:06	2020-07-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed