Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249551	10	危険	WaliSMS	-	Android用 WaliSMS CN アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1484	2012-03-19 14:16	2012-03-15	Show	GitHub Exploit DB Packet Storm

249552	10	危険	Zhou Bo	-	Android用 Message Forwarder アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1483	2012-03-19 14:15	2012-03-15	Show	GitHub Exploit DB Packet Storm

249553	10	危険	CooTek	-	Android 用 TouchPal Contacts アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1482	2012-03-19 14:09	2012-03-15	Show	GitHub Exploit DB Packet Storm

249554	10	危険	Kashif Masud	-	Android 用 Textdroid アプリケーションにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2012-1481	2012-03-19 14:06	2012-03-15	Show	GitHub Exploit DB Packet Storm

249555	6.4	警告	General Electric Company	-	GE Intelligent Platforms Proficy Real-Time Information Portal におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-0232	2012-03-19 13:56	2012-01-31	Show	GitHub Exploit DB Packet Storm

249556	10	危険	General Electric Company	-	GE Intelligent Platforms Proficy Plant Applications におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2012-0231	2012-03-19 13:53	2012-01-31	Show	GitHub Exploit DB Packet Storm

249557	10	危険	General Electric Company	-	GE Intelligent Platforms Proficy Plant Applications におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-0230	2012-03-19 13:51	2012-01-31	Show	GitHub Exploit DB Packet Storm

249558	10	危険	General Electric Company	-	GE Intelligent Platforms Proficy Historian におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-0229	2012-03-19 13:45	2012-01-31	Show	GitHub Exploit DB Packet Storm

249559	4.3	警告	株式会社ジェーン	-	Janetter におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1236	2012-03-19 12:02	2012-03-19	Show	GitHub Exploit DB Packet Storm

249560	4.3	警告	株式会社ジェーン	-	Janetter における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2012-0328	2012-03-19 12:02	2012-03-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211381	8.8	HIGH Network	tp-link	nc200_firmware nc210_firmware nc220_firmware nc230_firmware nc250_firmware nc260_firmware nc450_firmware	Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1…	CWE-78 OS Command	CVE-2020-12109	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

211382	9.8	CRITICAL Network	roundcube opensuse	webmail leap backports_sle	rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via shell metacharacters in a configuration setting for im_convert_path or im_identify_path.	CWE-78 OS Command	CVE-2020-12641	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

211383	9.8	CRITICAL Network	roundcube opensuse	webmail leap backports_sle	Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php.	CWE-22 Path Traversal	CVE-2020-12640	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

211384	8.8	HIGH Network	tp-link	nc260_firmware nc450_firmware	Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.	CWE-78 OS Command	CVE-2020-12111	2024-11-21 13:59	2020-05-5	Show	GitHub Exploit DB Packet Storm

211385	6.1	MEDIUM Network	phplist	phplist	phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php.	CWE-79 Cross-site Scripting	CVE-2020-12639	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

211386	5.5	MEDIUM Local	tp-link	omada_controller	TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile in /opt/tplink/EAPController/lib/eap-we…	CWE-22 Path Traversal	CVE-2020-12475	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

211387	9.8	CRITICAL Network	tp-link	nc200_firmware nc210_firmware nc220_firmware nc230_firmware nc250_firmware nc260_firmware nc450_firmware	Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, …	CWE-798 Use of Hard-coded Credentials	CVE-2020-12110	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

211388	5.4	MEDIUM Network	enhancesoft	osticket	include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.	CWE-79 Cross-site Scripting	CVE-2020-12629	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

211389	4.7	MEDIUM Local	linux	linux_kernel	A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to …	CWE-362 Race Condition	CVE-2020-12114	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm

211390	9.8	CRITICAL Network	janeczku	calibre-web	Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.	CWE-798 Use of Hard-coded Credentials	CVE-2020-12627	2024-11-21 13:59	2020-05-4	Show	GitHub Exploit DB Packet Storm