Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249321 5 警告 mark pilgrim - Universal Feed Parser におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2921 2012-05-23 18:50 2012-05-2 Show GitHub Exploit DB Packet Storm
249322 4.3 警告 Weston Ruter - WordPress 用 User Photo プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2920 2012-05-23 18:48 2012-05-21 Show GitHub Exploit DB Packet Storm
249323 4.3 警告 Andrew Killen - WordPress 用 Share and Follow プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2917 2012-05-23 18:47 2012-05-21 Show GitHub Exploit DB Packet Storm
249324 4.3 警告 dlo - WordPress 用 Sabre プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2916 2012-05-23 18:46 2012-05-21 Show GitHub Exploit DB Packet Storm
249325 4.3 警告 Hind - WordPress 用 Leaflet プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2913 2012-05-23 18:41 2012-05-21 Show GitHub Exploit DB Packet Storm
249326 4.3 警告 Kolja Schleich - WordPress 用 LeagueManager プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2912 2012-05-23 18:25 2012-05-21 Show GitHub Exploit DB Packet Storm
249327 5 警告 Chevereto Software - Chevereto の Upload/engine.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-2919 2012-05-23 18:19 2012-05-21 Show GitHub Exploit DB Packet Storm
249328 4.3 警告 Chevereto Software - Chevereto の Upload/engine.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2918 2012-05-23 18:18 2012-05-21 Show GitHub Exploit DB Packet Storm
249329 7.5 危険 Johan Cwiklinski - Galette の includes/picture.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-2338 2012-05-23 18:16 2012-05-21 Show GitHub Exploit DB Packet Storm
249330 10 危険 DMSoft Technologies - SkinCrafter の InitLicenKeys 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2271 2012-05-23 18:15 2012-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213991 6.5 MEDIUM
Network 		mozilla firefox
firefox_esr
thunderbird 		By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to instal… CWE-863
 Incorrect Authorization 		CVE-2020-15664 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
213992 9.8 CRITICAL
Network 		zohocorp manageengine_applications_manager In Zoho ManageEngine Application Manager 14.7 Build 14730 (before 14684, and between 14689 and 14750), the AlarmEscalation module is vulnerable to unauthenticated SQL Injection attack. CWE-89
SQL Injection 		CVE-2020-15533 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
213993 9.8 CRITICAL
Network 		nette
debian 		application
debian_linux 		Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is… CWE-94
Code Injection 		CVE-2020-15227 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
213994 8.8 HIGH
Network 		mozilla firefox
thunderbird
firefox_esr 		If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozilla Maintenance Serv… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15663 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
213995 5.0 MEDIUM
Network 		toolkit_project toolkit In the `@actions/core` npm module before version 1.2.6,`addPath` and `exportVariable` functions communicate with the Actions Runner over stdout by generating a string in a specific format. Workflows … CWE-77
Command Injection 		CVE-2020-15228 2024-11-21 14:05 2020-10-2 Show GitHub Exploit DB Packet Storm
213996 7.5 HIGH
Network 		re-desk re\ Re:Desk 2.3 allows insecure file upload. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-15488 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
213997 4.3 MEDIUM
Network 		zohocorp application_control_plus An issue was discovered in Zoho Application Control Plus before version 10.0.511. The Element Configuration feature (to configure elements included in the scope of elements managed by the product) al… NVD-CWE-noinfo
CVE-2020-15595 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
213998 4.3 MEDIUM
Network 		zohocorp application_control_plus An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a scan in order to discover open ports on a… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-15594 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
213999 9.8 CRITICAL
Network 		re-desk re\ Re:Desk 2.3 contains a blind unauthenticated SQL injection vulnerability in the getBaseCriteria() function in the protected/models/Ticket.php file. By modifying the folder GET parameter, it is possib… CWE-89
SQL Injection 		CVE-2020-15487 2024-11-21 14:05 2020-10-1 Show GitHub Exploit DB Packet Storm
214000 6.5 MEDIUM
Network 		goxmldsig_project
fedoraproject 		goxmldsig
fedora 		In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered fi… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-15216 2024-11-21 14:05 2020-09-30 Show GitHub Exploit DB Packet Storm