Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249301	7.5	危険	Icon Labs	-	Icon Labs Iconfidant SSL Server の鍵交換機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0651	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

249302	6.8	警告	Greenbone Networks GmbH	-	GSA におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0650	2012-03-27 18:42	2011-01-18	Show	GitHub Exploit DB Packet Storm

249303	7.2	危険	TIBCO Software	-	複数の TIBCO 製品における root 権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-0649	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

249304	8.5	危険	DELL EMC (旧 EMC Corporation)	-	EMC Avamar における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-0648	2012-03-27 18:42	2011-03-16	Show	GitHub Exploit DB Packet Storm

249305	10	危険	DELL EMC (旧 EMC Corporation)	-	EMC Replication Manager Client および NetWorker Module for Microsoft Applications の irccd.exe サービスにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0647	2012-03-27 18:42	2011-02-10	Show	GitHub Exploit DB Packet Storm

249306	7.5	危険	anserv	-	PHP LOW BIDS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0646	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

249307	7.5	危険	Phpcms	-	PHPCMS の data.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0645	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

249308	7.5	危険	Phpcms	-	PHPCMS の include/admin/model_field.class.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0644	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

249309	6.8	警告	php link directory	-	phpLD の admin/conf_users_edit.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0643	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

249310	4.3	警告	network-13	-	N-13 News の news/admin.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0642	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212401	6.5	MEDIUM Network	mozilla	firefox	Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the u…	CWE-125 Out-of-bounds Read	CVE-2020-12407	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212402	8.8	HIGH Network	mozilla canonical	thunderbird firefox firefox_esr ubuntu_linux	Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary cod…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-12406	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212403	5.3	MEDIUM Network	mozilla canonical	thunderbird firefox firefox_esr ubuntu_linux	When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2020-12405	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212404	4.3	MEDIUM Network	mozilla	firefox	For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnera…	CWE-79 Cross-site Scripting	CVE-2020-12404	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212405	4.4	MEDIUM Local	mozilla opensuse fedoraproject debian	firefox leap fedora debian_linux	During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perfo…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-12402	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212406	4.4	MEDIUM Local	mozilla debian	thunderbird firefox firefox_esr debian_linux	NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firef…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-12399	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212407	7.5	HIGH Network	mozilla canonical	thunderbird ubuntu_linux	If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-12398	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

212408	6.5	MEDIUM Network	mozilla opensuse	firefox leap	When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission;…	CWE-276 Incorrect Default Permissions	CVE-2020-12424	2024-11-21 13:59	2020-07-9	Show	GitHub Exploit DB Packet Storm

212409	7.5	HIGH Network	apache oracle	camel enterprise_repository enterprise_manager_base_platform communications_diameter_signaling_router	Server-Side Template Injection and arbitrary file disclosure on Camel templating components	CWE-74 Injection	CVE-2020-11994	2024-11-21 13:59	2020-07-9	Show	GitHub Exploit DB Packet Storm

212410	8.1	HIGH Network	ledger	ledger_live	Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's balance with the value of an unconfirmed transaction as soon as it is received (before the transaction…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-12119	2024-11-21 13:59	2020-07-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed