Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249901	10	危険	光洋電子工業	-	複数の光洋電子工業社製品の ECOM Ethernet モジュールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1805	2012-04-17 16:47	2012-04-11	Show	GitHub Exploit DB Packet Storm

249902	7.5	危険	libarchive	-	libarchive におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1779	2012-04-17 16:46	2012-04-13	Show	GitHub Exploit DB Packet Storm

249903	7.5	危険	libarchive	-	libarchive におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4666	2012-04-17 16:29	2012-04-13	Show	GitHub Exploit DB Packet Storm

249904	9.3	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird における権限を取得される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3655	2012-04-16 18:09	2011-11-8	Show	GitHub Exploit DB Packet Storm

249905	10	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3654	2012-04-16 18:07	2011-11-8	Show	GitHub Exploit DB Packet Storm

249906	10	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3652	2012-04-16 17:16	2011-11-8	Show	GitHub Exploit DB Packet Storm

249907	10	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-3651	2012-04-16 17:14	2011-11-8	Show	GitHub Exploit DB Packet Storm

249908	9.3	危険	Mozilla Foundation レッドハット	-	Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3650	2012-04-16 17:13	2011-11-8	Show	GitHub Exploit DB Packet Storm

249909	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および Thunderbird におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3648	2012-04-16 17:11	2011-11-8	Show	GitHub Exploit DB Packet Storm

249910	4.3	警告	Wireshark	-	Wireshark の lanalyzer_read 関数におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0068	2012-04-16 17:07	2012-01-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209281	6.1	MEDIUM Network	os4ed	opensis	OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.	CWE-79 Cross-site Scripting	CVE-2020-27409	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209282	7.5	HIGH Network	os4ed	opensis	OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.	CWE-287 CWE-640 Improper Authentication Weak Password Recovery Mechanism for Forgotten Password	CVE-2020-27408	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209283	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27771	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209284	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered …	CWE-190 Integer Overflow or Wraparound	CVE-2020-27770	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209285	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27766	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209286	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.…	CWE-369 Divide By Zero	CVE-2020-27765	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209287	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27767	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209288	6.8	MEDIUM Local	canonical	snapcraft ubuntu_linux	In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl…	CWE-427 Uncontrolled Search Path Element	CVE-2020-27348	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

209289	6.1	MEDIUM Network	lxml redhat debian fedoraproject netapp oracle	lxml enterprise_linux software_collections debian_linux fedora snapcenter communications_offline_mediation_controller zfs_storage_appliance_kit	A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r…	-	CVE-2020-27783	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

209290	7.5	HIGH Network	freedesktop redhat debian	poppler enterprise_linux debian_linux	A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' …	CWE-824 Access of Uninitialized Pointer	CVE-2020-27778	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed