Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249631 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2012-2424 2012-04-27 15:47 2012-04-25 Show GitHub Exploit DB Packet Storm
249632 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2423 2012-04-27 15:46 2012-04-25 Show GitHub Exploit DB Packet Storm
249633 2.9 注意 Intuit - Intuit QuickBooks におけるパス名の情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2422 2012-04-27 15:04 2012-04-25 Show GitHub Exploit DB Packet Storm
249634 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-2421 2012-04-27 15:03 2012-04-25 Show GitHub Exploit DB Packet Storm
249635 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2420 2012-04-27 15:02 2012-04-25 Show GitHub Exploit DB Packet Storm
249636 1.8 注意 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2419 2012-04-27 15:00 2012-04-25 Show GitHub Exploit DB Packet Storm
249637 6.8 警告 Intuit - Intuit QuickBooks の intu-help-qb ハンドラにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2418 2012-04-27 14:49 2012-04-25 Show GitHub Exploit DB Packet Storm
249638 4.6 警告 サイバートラスト株式会社
Net_SSLeay
Canonical		 - Perl モジュール Net::SSLeay.pm の entropy ソースの扱いに関する脆弱性 - CVE-2005-0106 2012-04-27 14:12 2005-05-3 Show GitHub Exploit DB Packet Storm
249639 4.3 警告 osCommerce - osCommerce におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0312 2012-04-26 16:56 2012-01-20 Show GitHub Exploit DB Packet Storm
249640 2.6 注意 Mozilla Foundation - 複数の Mozilla 製品における IPv6 リテラルのアクセス制御リスト (ACL) を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0475 2012-04-26 16:00 2012-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201361 6.8 MEDIUM
Physics 		lenovo thinkpad_t495s_firmware
thinkpad_x395_firmware
thinkpad_t495_firmware
thinkpad_a485_firmware
thinkpad_a285_firmware
thinkpad_a475_firmware
thinkpad_a275_firmware 		The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access. CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2020-8334 2024-11-21 14:38 2020-06-10 Show GitHub Exploit DB Packet Storm
201362 6.7 MEDIUM
Local 		lenovo 330-14ast_firmware
330-15ast_firmware
330-17ast_firmware
340c-15api_firmware
340c-15ast_firmware
720s_touch-15ikb_firmware
720s-15ikb_firmware
730s-13iwl_firmware
c640-iml_fir… 		A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. NVD-CWE-noinfo
CVE-2020-8323 2024-11-21 14:38 2020-06-10 Show GitHub Exploit DB Packet Storm
201363 6.7 MEDIUM
Local 		lenovo 330-14ast_firmware
330-15ast_firmware
330-17ast_firmware
340c-15api_firmware
340c-15ast_firmware
720s_touch-15ikb_firmware
720s-15ikb_firmware
730s-13iwl_firmware
c640-iml_fir… 		A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. NVD-CWE-noinfo
CVE-2020-8322 2024-11-21 14:38 2020-06-10 Show GitHub Exploit DB Packet Storm
201364 6.7 MEDIUM
Local 		lenovo 130-14ast_firmware
130-14ikb_firmware
130-15ast_firmware
130-15ikb_firmware
320c-15ikb_firmware
330-14igm_firmware
330-14ikb_firmware
330-14ikbr_firmware
330-15arr_firmware 		A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. NVD-CWE-noinfo
CVE-2020-8321 2024-11-21 14:38 2020-06-10 Show GitHub Exploit DB Packet Storm
201365 6.8 MEDIUM
Physics 		lenovo thinkpad_11e_yoga_gen_6_firmware
thinkpad_11e_firmware
thinkpad_yoga_11e_3rd_gen_firmware
thinkpad_yoga_11e_4th_gen_firmware
thinkpad_yoga_11e_5th_gen_firmware
thinkpad_13_2nd_gen_firm… 		An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. CWE-269
 Improper Privilege Management 		CVE-2020-8320 2024-11-21 14:38 2020-06-10 Show GitHub Exploit DB Packet Storm
201366 9.9 CRITICAL
Network 		nextcloud talk A too lax check in Nextcloud Talk 6.0.4, 7.0.2 and 8.0.7 allowed a code injection when a not correctly sanitized talk command was added by an administrator. CWE-94
Code Injection 		CVE-2020-8180 2024-11-21 14:38 2020-06-8 Show GitHub Exploit DB Packet Storm
201367 7.4 HIGH
Network 		nodejs
oracle 		node.js
graalvm
banking_extensibility_workbench
mysql_cluster
blockchain_platform 		TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0. CWE-295
Improper Certificate Validation  		CVE-2020-8172 2024-11-21 14:38 2020-06-8 Show GitHub Exploit DB Packet Storm
201368 7.1 HIGH
Local 		bitdefender antivirus_2020 A vulnerability in the improper handling of symbolic links in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This… CWE-59
Link Following 		CVE-2020-8103 2024-11-21 14:38 2020-06-6 Show GitHub Exploit DB Packet Storm
201369 5.5 MEDIUM
Local 		abb device_library_wizard Insecure storage of sensitive information in ABB Device Library Wizard versions 6.0.X, 6.0.3.1 and 6.0.3.2 allows unauthenticated low privilege user to read file that contains confidential data CWE-922
 Insecure Storage of Sensitive Information 		CVE-2020-8482 2024-11-21 14:38 2020-05-30 Show GitHub Exploit DB Packet Storm
201370 7.5 HIGH
Network 		lenovo lj4010dn_firmware
lj6700dn_firmware
m8960dnf_firmware 		A denial of service vulnerability was reported in the firmware prior to version 1.01 used in Lenovo Printer LJ4010DN that could be triggered by a remote user sending a crafted packet to the device, p… NVD-CWE-noinfo
CVE-2020-8330 2024-11-21 14:38 2020-05-29 Show GitHub Exploit DB Packet Storm