Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249071	6.9	警告	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point の複数の製品における権限を取得される脆弱性	CWE-Other その他	CVE-2012-2753	2012-06-21 14:17	2012-06-10	Show	GitHub Exploit DB Packet Storm

249072	7.6	危険	アドビシステムズアップルヒューレット・パッカード OpenSSL Project VMware レッドハット	-	OpenSSL の ssl/t1_lib.c における任意のコードを実行される脆弱性	CWE-362 競合状態	CVE-2010-3864	2012-06-20 17:08	2010-11-16	Show	GitHub Exploit DB Packet Storm

249073	9.3	危険	The Document Foundation	-	LibreOffice に複数の脆弱性	CWE-119 バッファエラー	CVE-2011-2685	2012-06-20 17:03	2011-06-23	Show	GitHub Exploit DB Packet Storm

249074	3.3	注意	Gajim.org	-	Gajim の src/common/latex.py における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2012-2093	2012-06-20 16:45	2012-04-10	Show	GitHub Exploit DB Packet Storm

249075	9.3	危険	マイクロソフト	-	Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0141	2012-06-20 16:29	2012-05-8	Show	GitHub Exploit DB Packet Storm

249076	7.5	危険	Mozilla Foundation	-	複数の Mozilla 製品の nsHTMLSelectElement 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-3671	2012-06-20 15:24	2012-06-18	Show	GitHub Exploit DB Packet Storm

249077	3.6	注意	MantisBT Group	-	MantisBT におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2692	2012-06-20 15:15	2012-06-2	Show	GitHub Exploit DB Packet Storm

249078	7.5	危険	MantisBT Group	-	MantisBT の mc_issue_note_update 関数における任意の bugnote を編集される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2691	2012-06-20 15:09	2012-06-3	Show	GitHub Exploit DB Packet Storm

249079	7.5	危険	PyPam	-	PyPam の PAMmodule.c 内の PyPAM_conv におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2012-1502	2012-06-20 14:22	2012-06-16	Show	GitHub Exploit DB Packet Storm

249080	5	警告	レッドハット	-	Red Hat Network Satellite におけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2012-1145	2012-06-20 13:56	2012-03-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213441	8.1	HIGH Network	pghero_project	pghero	The PgHero gem through 2.6.0 for Ruby allows CSRF.	CWE-352 Origin Validation Error	CVE-2020-16253	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

213442	4.3	MEDIUM Network	field_test_project	field_test	The Field Test gem 0.2.0 through 0.3.2 for Ruby allows CSRF.	CWE-352 Origin Validation Error	CVE-2020-16252	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

213443	6.1	MEDIUM Network	extremenetworks	extreme_management_center	Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887.	CWE-79 Cross-site Scripting	CVE-2020-16847	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

213444	5.9	MEDIUM Network	amazon	firecracker	In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured wit…	NVD-CWE-noinfo	CVE-2020-16843	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

213445	9.1	CRITICAL Network	kee	keepassrpc	The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database vi…	CWE-20 Improper Input Validation	CVE-2020-16272	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

213446	9.1	CRITICAL Network	kee	keepassrpc	The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket …	CWE-330 Use of Insufficiently Random Values	CVE-2020-16271	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

213447	5.5	MEDIUM Local	radare fedoraproject	radare2 fedora	radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.	NVD-CWE-noinfo	CVE-2020-16269	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

213448	8.8	HIGH Network	mozilla	thunderbird	During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.	CWE-77 Command Injection	CVE-2020-15685	2024-11-21 14:06	2022-12-23	Show	GitHub Exploit DB Packet Storm

213449	7.6	HIGH Network	mozilla	vpn	An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as …	CWE-384 Session Fixation	CVE-2020-15679	2024-11-21 14:06	2022-12-23	Show	GitHub Exploit DB Packet Storm

213450	5.3	MEDIUM Network	fedoraproject	supybot-fedora	supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time.	NVD-CWE-noinfo	CVE-2020-15853	2024-11-21 14:06	2022-10-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed