Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249401	9.3	危険	アップル	-	Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0665	2012-05-17 15:54	2012-05-16	Show	GitHub Exploit DB Packet Storm

249402	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0664	2012-05-17 15:52	2012-05-16	Show	GitHub Exploit DB Packet Storm

249403	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0663	2012-05-17 15:51	2012-05-16	Show	GitHub Exploit DB Packet Storm

249404	9.3	危険	アップル	-	Windows 上で稼働する Apple QuickTime におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0265	2012-05-17 15:50	2012-05-16	Show	GitHub Exploit DB Packet Storm

249405	10	危険	Google	-	Linux 上で稼働する Google Chrome における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-3101	2012-05-17 15:10	2012-05-15	Show	GitHub Exploit DB Packet Storm

249406	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-noinfo 情報不足	CVE-2011-3100	2012-05-17 15:08	2012-05-15	Show	GitHub Exploit DB Packet Storm

249407	7.5	危険	Google	-	Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3099	2012-05-17 14:55	2012-05-15	Show	GitHub Exploit DB Packet Storm

249408	7.5	危険	Google	-	Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3097	2012-05-17 14:44	2012-05-15	Show	GitHub Exploit DB Packet Storm

249409	7.5	危険	Google	-	Linux 上で稼働する Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3096	2012-05-17 14:21	2012-05-15	Show	GitHub Exploit DB Packet Storm

249410	7.5	危険	Google	-	Google Chrome の Ogg コンテナにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3095	2012-05-17 14:19	2012-05-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201221	5.4	MEDIUM Network	alfresco	alfresco	Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.	CWE-79 Cross-site Scripting	CVE-2020-8776	2024-11-21 14:39	2020-03-3	Show	GitHub Exploit DB Packet Storm

201222	6.1	MEDIUM Network	fiserv	accurate_reconciliation	Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.	CWE-79 Cross-site Scripting	CVE-2020-8952	2024-11-21 14:39	2020-02-27	Show	GitHub Exploit DB Packet Storm

201223	5.4	MEDIUM Network	fiserv	accurate_reconciliation	Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page.	CWE-79 Cross-site Scripting	CVE-2020-8951	2024-11-21 14:39	2020-02-27	Show	GitHub Exploit DB Packet Storm

201224	8.1	HIGH Network	gurux	device_language_message_specification_director	An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path trav…	CWE-22 Path Traversal	CVE-2020-8810	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201225	8.1	HIGH Network	gurux	device_language_message_specification_director	Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by mo…	CWE-494 Download of Code Without Integrity Check	CVE-2020-8809	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201226	6.1	MEDIUM Network	wpjobboard	wpjobboard	The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description.	CWE-79 Cross-site Scripting	CVE-2020-9019	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201227	5.3	MEDIUM Network	litecart	litecart	LiteCart through 2.2.1 allows admin/?app=users&doc=edit_user CSRF to add a user.	CWE-352 Origin Validation Error	CVE-2020-9018	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201228	5.4	MEDIUM Network	blackboard	blackboard_learn	Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor.	CWE-79 Cross-site Scripting	CVE-2020-9008	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201229	8.0	HIGH Network	litecart	litecart	LiteCart through 2.2.1 allows CSV injection via a customer's profile.	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2020-9017	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

201230	9.8	CRITICAL Network	opensmtpd canonical fedoraproject debian	opensmtpd ubuntu_linux fedora debian_linux	OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTP…	CWE-125 Out-of-bounds Read	CVE-2020-8794	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed