Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249551 10 危険 WaliSMS - Android用 WaliSMS CN アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1484 2012-03-19 14:16 2012-03-15 Show GitHub Exploit DB Packet Storm
249552 10 危険 Zhou Bo - Android用 Message Forwarder アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1483 2012-03-19 14:15 2012-03-15 Show GitHub Exploit DB Packet Storm
249553 10 危険 CooTek - Android 用 TouchPal Contacts アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1482 2012-03-19 14:09 2012-03-15 Show GitHub Exploit DB Packet Storm
249554 10 危険 Kashif Masud - Android 用 Textdroid アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1481 2012-03-19 14:06 2012-03-15 Show GitHub Exploit DB Packet Storm
249555 6.4 警告 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-0232 2012-03-19 13:56 2012-01-31 Show GitHub Exploit DB Packet Storm
249556 10 危険 General Electric Company - GE Intelligent Platforms Proficy Plant Applications におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2012-0231 2012-03-19 13:53 2012-01-31 Show GitHub Exploit DB Packet Storm
249557 10 危険 General Electric Company - GE Intelligent Platforms Proficy Plant Applications におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-0230 2012-03-19 13:51 2012-01-31 Show GitHub Exploit DB Packet Storm
249558 10 危険 General Electric Company - GE Intelligent Platforms Proficy Historian におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2012-0229 2012-03-19 13:45 2012-01-31 Show GitHub Exploit DB Packet Storm
249559 4.3 警告 株式会社ジェーン - Janetter におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1236 2012-03-19 12:02 2012-03-19 Show GitHub Exploit DB Packet Storm
249560 4.3 警告 株式会社ジェーン - Janetter における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2012-0328 2012-03-19 12:02 2012-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211681 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn533a8_firmware
wn551k1_firmware
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configurati… CWE-306
Missing Authentication for Critical Function
CVE-2020-10973 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
211682 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn572hg3_firmware
An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a ce… CWE-306
CWE-522
Missing Authentication for Critical Function
 Insufficiently Protected Credentials
CVE-2020-10972 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
211683 8.8 HIGH
Network
wavlink wl-wn575a3_firmware
wl-wn530hg4_firmware
wl-wn579g3_firmware
An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the… CWE-20
 Improper Input Validation 
CVE-2020-10971 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
211684 5.4 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with conte… CWE-79
Cross-site Scripting
CVE-2020-11036 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211685 9.3 CRITICAL
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values.… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-11035 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211686 6.1 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6. CWE-601
Open Redirect
CVE-2020-11034 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211687 7.2 HIGH
Network
glpi-project glpi In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6. CWE-89
SQL Injection
CVE-2020-11032 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211688 6.5 MEDIUM
Network
zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request. CWE-22
Path Traversal
CVE-2020-10859 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211689 7.2 HIGH
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All ap… CWE-200
Information Exposure
CVE-2020-11033 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
211690 4.8 MEDIUM
Network
requarks wiki.js In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another edit… CWE-79
Cross-site Scripting
CVE-2020-11051 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm