Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249331	9.3	危険	Lattice Semiconductor	-	Lattice Semiconductor PAC-Designer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-2915	2012-05-23 18:04	2012-05-21	Show	GitHub Exploit DB Packet Storm

249332	5	警告	リアルネットワークス	-	RealNetworks RealPlayer および RealPlayer SP におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-1904	2012-05-23 18:04	2012-03-28	Show	GitHub Exploit DB Packet Storm

249333	4.3	警告	unijimpe	-	Unijimpe Captcha の captchademo.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2914	2012-05-23 18:02	2012-05-21	Show	GitHub Exploit DB Packet Storm

249334	4.3	警告	SiliSoftware	-	SiliSoftware backupDB() の backupDB.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2911	2012-05-23 17:54	2012-05-21	Show	GitHub Exploit DB Packet Storm

249335	4.3	警告	SiliSoftware	-	SiliSoftware phpThumb() におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2910	2012-05-23 17:53	2012-05-21	Show	GitHub Exploit DB Packet Storm

249336	4.3	警告	Artiphp	-	Artiphp CMS の artpublic/recommandation/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2906	2012-05-23 17:50	2012-05-21	Show	GitHub Exploit DB Packet Storm

249337	5	警告	Artiphp	-	Artiphp CMS における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2905	2012-05-23 17:49	2012-05-21	Show	GitHub Exploit DB Packet Storm

249338	4.3	警告	Viscacha	-	Viscacha におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2909	2012-05-23 16:57	2012-05-21	Show	GitHub Exploit DB Packet Storm

249339	7.5	危険	Viscacha	-	Viscacha の admin/bbcodes.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2908	2012-05-23 16:56	2012-05-21	Show	GitHub Exploit DB Packet Storm

249340	4.3	警告	LongTail Ad Solutions	-	LongTail JW Player の player.swf におけるクロスサイトスクリプティング攻撃を実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2904	2012-05-23 16:55	2012-05-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201211	7.5	HIGH Network	telestream	sentry medius	Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=l…	CWE-89 SQL Injection	CVE-2020-8887	2024-11-21 14:39	2020-09-22	Show	GitHub Exploit DB Packet Storm

201212	6.5	MEDIUM Local	huawei	taurus-an00b_firmware	Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. S…	CWE-416 Use After Free	CVE-2020-9084	2024-11-21 14:39	2020-09-19	Show	GitHub Exploit DB Packet Storm

201213	6.5	MEDIUM Network	google debian fedoraproject canonical opensuse microsoft	brotli debian_linux fedora ubuntu_linux leap visual_studio_2019 .net .net_core powershell visual_studio_2022	A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happ…	CWE-120 Classic Buffer Overflow	CVE-2020-8927	2024-11-21 14:39	2020-09-15	Show	GitHub Exploit DB Packet Storm

201214	8.1	HIGH Network	dataiku	data_science_studio	Dataiku DSS before 6.0.5 allows attackers write access to the project to modify the "Created by" metadata.	NVD-CWE-noinfo	CVE-2020-8817	2024-11-21 14:39	2020-09-14	Show	GitHub Exploit DB Packet Storm

201215	9.8	CRITICAL Network	intel netapp	standard_manageability active_management_technology_firmware steelstore_cloud_integrated_storage	Improper buffer restrictions in network subsystem in provisioned Intel(R) AMT and Intel(R) ISM versions before 11.8.79, 11.12.79, 11.22.79, 12.0.68 and 14.0.39 may allow an unauthenticated user to po…	NVD-CWE-noinfo	CVE-2020-8758	2024-11-21 14:39	2020-09-11	Show	GitHub Exploit DB Packet Storm

201216	2.4	LOW Physics	huawei	mate_20_firmware	HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to insuffi…	NVD-CWE-noinfo	CVE-2020-9083	2024-11-21 14:39	2020-09-4	Show	GitHub Exploit DB Packet Storm

201217	5.4	MEDIUM Network	netapp	clustered_data_ontap	Clustered Data ONTAP versions prior to 9.3P19, 9.5P14, 9.6P9 and 9.7 are susceptible to a vulnerability which when successfully exploited could lead to addition or modification of data or disclosure …	NVD-CWE-noinfo	CVE-2020-8576	2024-11-21 14:39	2020-09-3	Show	GitHub Exploit DB Packet Storm

201218	7.2	HIGH Network	trendmicro	deep_security_manager vulnerability_protection	A vulnerability in the management consoles of Trend Micro Deep Security 10.0-12.0 and Trend Micro Vulnerability Protection 2.0 SP2 may allow an authenticated attacker with full control privileges to …	NVD-CWE-noinfo	CVE-2020-8602	2024-11-21 14:39	2020-08-28	Show	GitHub Exploit DB Packet Storm

201219	7.6	HIGH Physics	ncr	aptra_xfs	NCR SelfServ ATMs running APTRA XFS 05.01.00 or earlier do not authenticate or protect the integrity of USB HID communications between the currency dispenser and the host computer, permitting an atta…	CWE-120 Classic Buffer Overflow	CVE-2020-9063	2024-11-21 14:39	2020-08-22	Show	GitHub Exploit DB Packet Storm

201220	5.3	MEDIUM Physics	dieboldnixdorf	probase	Diebold Nixdorf ProCash 2100xe USB ATMs running Wincor Probase version 1.1.30 do not encrypt, authenticate, or verify the integrity of messages between the CCDM and the host computer, allowing an att…	CWE-306 CWE-311 Missing Authentication for Critical Function Missing Encryption of Sensitive Data	CVE-2020-9062	2024-11-21 14:39	2020-08-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed