Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249321 5 警告 mark pilgrim - Universal Feed Parser におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2921 2012-05-23 18:50 2012-05-2 Show GitHub Exploit DB Packet Storm
249322 4.3 警告 Weston Ruter - WordPress 用 User Photo プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2920 2012-05-23 18:48 2012-05-21 Show GitHub Exploit DB Packet Storm
249323 4.3 警告 Andrew Killen - WordPress 用 Share and Follow プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2917 2012-05-23 18:47 2012-05-21 Show GitHub Exploit DB Packet Storm
249324 4.3 警告 dlo - WordPress 用 Sabre プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2916 2012-05-23 18:46 2012-05-21 Show GitHub Exploit DB Packet Storm
249325 4.3 警告 Hind - WordPress 用 Leaflet プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2913 2012-05-23 18:41 2012-05-21 Show GitHub Exploit DB Packet Storm
249326 4.3 警告 Kolja Schleich - WordPress 用 LeagueManager プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2912 2012-05-23 18:25 2012-05-21 Show GitHub Exploit DB Packet Storm
249327 5 警告 Chevereto Software - Chevereto の Upload/engine.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2919 2012-05-23 18:19 2012-05-21 Show GitHub Exploit DB Packet Storm
249328 4.3 警告 Chevereto Software - Chevereto の Upload/engine.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2918 2012-05-23 18:18 2012-05-21 Show GitHub Exploit DB Packet Storm
249329 7.5 危険 Johan Cwiklinski - Galette の includes/picture.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-2338 2012-05-23 18:16 2012-05-21 Show GitHub Exploit DB Packet Storm
249330 10 危険 DMSoft Technologies - SkinCrafter の InitLicenKeys 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2271 2012-05-23 18:15 2012-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209791 6.5 MEDIUM
Network
college_management_system_project college_management_system A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, facult… CWE-352
 Origin Validation Error
CVE-2020-25408 2024-11-21 14:17 2021-05-24 Show GitHub Exploit DB Packet Storm
209792 7.5 HIGH
Network
siemens simatic_net_cp_343-1_advanced_firmware
simatic_net_cp_343-1_lean_firmware
simatic_net_cp_343-1_standard_firmware
A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Sta… - CVE-2020-25242 2024-11-21 14:17 2021-05-12 Show GitHub Exploit DB Packet Storm
209793 8.4 HIGH
Local
siemens logo\!_soft_comfort A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local… CWE-427
 Uncontrolled Search Path Element
CVE-2020-25244 2024-11-21 14:17 2021-04-23 Show GitHub Exploit DB Packet Storm
209794 5.1 MEDIUM
Local
siemens logo\!_soft_comfort A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chain… - CVE-2020-25243 2024-11-21 14:17 2021-04-23 Show GitHub Exploit DB Packet Storm
209795 9.8 CRITICAL
Network
grandstream grp2612_firmware
grp2612p_firmware
grp2612w_firmware
grp2613_firmware
grp2614_firmware
grp2615_firmware
grp2616_firmware
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface. CWE-306
Missing Authentication for Critical Function
CVE-2020-25218 2024-11-21 14:17 2021-03-30 Show GitHub Exploit DB Packet Storm
209796 7.2 HIGH
Network
grandstream grp2612_firmware
grp2612p_firmware
grp2612w_firmware
grp2613_firmware
grp2614_firmware
grp2615_firmware
grp2616_firmware
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface. CWE-77
Command Injection
CVE-2020-25217 2024-11-21 14:17 2021-03-30 Show GitHub Exploit DB Packet Storm
209797 8.6 HIGH
Network
squid-cache
debian
fedoraproject
netapp
squid
debian_linux
fedora
cloud_manager
An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbi… CWE-20
CWE-444
 Improper Input Validation 
HTTP Request Smuggling
CVE-2020-25097 2024-11-21 14:17 2021-03-19 Show GitHub Exploit DB Packet Storm
209798 7.5 HIGH
Network
siemens simatic_mv440_sr_firmware
simatic_mv440_hr_firmware
simatic_mv440_ur_firmware
simatic_mv420_sr-b_firmware
simatic_mv420_sr-p_firmware
simatic_mv420_sr-b_body_firmware
simatic_mv420_…
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP… CWE-129
 Improper Validation of Array Index
CVE-2020-25241 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm
209799 8.8 HIGH
Network
siemens sinema_remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integr… - CVE-2020-25240 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm
209800 8.8 HIGH
Network
siemens sinema_remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the… - CVE-2020-25239 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm