Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249811 5 警告 GitHub - GitHub Enterprise における public_key[user_id] の値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2055 2012-04-6 16:21 2012-04-4 Show GitHub Exploit DB Packet Storm
249812 5 警告 Redmine - Redmine における属性を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2054 2012-04-6 16:21 2012-03-6 Show GitHub Exploit DB Packet Storm
249813 5 警告 Spree Commerce - Spree のセッション Cookie ストアの実装における暗号保護メカニズムを容易に回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7311 2012-04-6 16:19 2008-08-12 Show GitHub Exploit DB Packet Storm
249814 5 警告 Spree Commerce - Spree における Order ステートの値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7310 2012-04-6 16:16 2008-09-16 Show GitHub Exploit DB Packet Storm
249815 5 警告 Insoshi - Insoshi における ForumPost user_id の値を設定される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7309 2012-04-6 16:15 2008-09-21 Show GitHub Exploit DB Packet Storm
249816 3.5 注意 OpenBSD - OpenSSH の gss-serv.c 内の ssh_gssapi_parse_ename 関数におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-5000 2012-04-6 16:00 2012-04-5 Show GitHub Exploit DB Packet Storm
249817 7.2 危険 F5 Networks - F5 FirePass の sudoers ファイルにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2053 2012-04-6 15:53 2012-04-5 Show GitHub Exploit DB Packet Storm
249818 7.5 危険 F5 Networks - F5 FirePass の my.activation.php3 における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1777 2012-04-6 15:43 2012-03-14 Show GitHub Exploit DB Packet Storm
249819 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1337 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
249820 9.3 危険 シスコシステムズ - Cisco WebEx Recording Format (WRF) Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1336 2012-04-6 15:41 2012-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209621 7.5 HIGH
Network 		reolink rln8-410_firmware
rlc-422_firmware
rlc-510a_firmware
rlc-410_firmware
rlc-423s_firmware
rlc-423_firmware
rlc-520a_firmware 		The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-25169 2024-11-21 14:17 2021-01-27 Show GitHub Exploit DB Packet Storm
209622 6.1 MEDIUM
Network 		nagios log_server Nagios Log Server 2.1.7 contains a cross-site scripting (XSS) vulnerability in /nagioslogserver/configure/create_snapshot through the snapshot_name parameter, which may impact users who open a malici… CWE-79
Cross-site Scripting 		CVE-2020-25385 2024-11-21 14:17 2021-01-20 Show GitHub Exploit DB Packet Storm
209623 9.8 CRITICAL
Network 		siemens scalance_x200-4pirt_firmware
scalance_x201-3pirt_firmware
scalance_x202-2irt_firmware
scalance_x202-2pirt_firmware
scalance_x202-2pirt_siplus_net_firmware
scalance_x204irt_firmware
… 		A vulnerability has been identified in SCALANCE X-200 switch family (incl. SIPLUS NET variants) (All versions < V5.2.5), SCALANCE X-200IRT switch family (incl. SIPLUS NET variants) (All versions < V5… - CVE-2020-25226 2024-11-21 14:17 2021-01-13 Show GitHub Exploit DB Packet Storm
209624 7.5 HIGH
Network 		dovecot
debian
fedoraproject 		dovecot
debian_linux
fedora 		Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts. CWE-20
 Improper Input Validation  		CVE-2020-25275 2024-11-21 14:17 2021-01-5 Show GitHub Exploit DB Packet Storm
209625 8.8 HIGH
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a sessio… CWE-384
 Session Fixation 		CVE-2020-25198 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209626 9.8 CRITICAL
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-25196 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209627 8.8 HIGH
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administ… CWE-269
 Improper Privilege Management 		CVE-2020-25194 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209628 5.3 MEDIUM
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization. CWE-200
Information Exposure 		CVE-2020-25192 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209629 9.8 CRITICAL
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-25190 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm
209630 7.5 HIGH
Network 		moxa nport_iaw5000a-i\/o_firmware The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords. CWE-521
Weak Password Requirements  		CVE-2020-25153 2024-11-21 14:17 2020-12-24 Show GitHub Exploit DB Packet Storm