Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249871 5 警告 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client におけるディレクトリトラバーサル攻撃の脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1917 2012-03-29 16:18 2012-03-27 Show GitHub Exploit DB Packet Storm
249872 7.5 危険 atmail pty ltd - Atmail オープンソースの Atmail WebMail Client における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2012-1916 2012-03-29 16:17 2012-03-27 Show GitHub Exploit DB Packet Storm
249873 4.6 警告 Opera Software ASA - UNIX 上で稼働する Opera における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1931 2012-03-29 16:16 2012-03-28 Show GitHub Exploit DB Packet Storm
249874 4.6 警告 Opera Software ASA - UNIX 上で稼働する Opera における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1930 2012-03-29 16:15 2012-03-28 Show GitHub Exploit DB Packet Storm
249875 6.4 警告 Opera Software ASA - Opera におけるアドレスフィールドを偽装される脆弱性 CWE-20
不適切な入力確認
CVE-2012-1928 2012-03-29 15:59 2012-03-27 Show GitHub Exploit DB Packet Storm
249876 5 警告 Opera Software ASA - Opera における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい
CVE-2012-1926 2012-03-29 15:56 2012-03-27 Show GitHub Exploit DB Packet Storm
249877 6.8 警告 Opera Software ASA - Opera における任意のファイルをダウンロードおよび実行させられる脆弱性 CWE-DesignError
CVE-2012-1925 2012-03-29 15:48 2012-03-28 Show GitHub Exploit DB Packet Storm
249878 6.8 警告 Opera Software ASA - Opera における任意のファイルをダウンロードおよび実行させられる脆弱性 CWE-94
コード・インジェクション
CVE-2012-1924 2012-03-29 15:47 2012-03-28 Show GitHub Exploit DB Packet Storm
249879 5 警告 PrivaWall - PrivaWall Antivirus のスキャナエンジンにおけるマルウェアの検出を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1907 2012-03-29 15:43 2012-03-28 Show GitHub Exploit DB Packet Storm
249880 6.4 警告 MaraDNS - MaraDNS における無効なドメイン名の継続的な名前解決を可能にされる脆弱性 CWE-DesignError
CVE-2012-1570 2012-03-29 15:25 2012-03-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201521 6.1 MEDIUM
Network
synaptivemedical clearcanvas Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product ca… CWE-79
Cross-site Scripting
CVE-2020-8788 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201522 9.8 CRITICAL
Network
eyesofnetwork eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via th… CWE-89
SQL Injection
CVE-2020-8656 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201523 8.8 HIGH
Network
eyesofnetwork eyesofnetwork An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index… CWE-78
OS Command 
CVE-2020-8654 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201524 9.8 CRITICAL
Network
simplejobscript simplejobscript An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is job_id. The function i… CWE-89
SQL Injection
CVE-2020-8645 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201525 9.8 CRITICAL
Network
revmakx infinitewp_client The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in. CWE-862
 Missing Authorization
CVE-2020-8772 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201526 9.8 CRITICAL
Network
wptimecapsule wp_time_capsule The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of adminis… CWE-287
Improper Authentication
CVE-2020-8771 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201527 9.8 CRITICAL
Network
opservices opmon An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution . CWE-306
Missing Authentication for Critical Function
CVE-2020-8636 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201528 5.6 MEDIUM
Network
libslirp_project
debian
opensuse
libslirp
debian_linux
leap
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. CWE-120
Classic Buffer Overflow
CVE-2020-8608 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
201529 8.8 HIGH
Network
bestwebsoft htaccess The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the p… CWE-352
 Origin Validation Error
CVE-2020-8658 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
201530 5.9 MEDIUM
Physics
linux
opensuse
debian
linux_kernel
leap
debian_linux
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c. CWE-416
 Use After Free
CVE-2020-8649 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm