Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249931	10	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるサービス運用妨害 (メモリ破損およびアプリケーションクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2995	2012-04-16 15:58	2011-09-27	Show	GitHub Exploit DB Packet Storm

249932	3.5	注意	Mozilla Foundation	-	複数の Mozilla 製品におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2372	2012-04-16 15:57	2011-09-27	Show	GitHub Exploit DB Packet Storm

249933	9.3	危険	アップル	-	Apple iOS の FreeType における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-3439	2012-04-16 15:55	2011-11-11	Show	GitHub Exploit DB Packet Storm

249934	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2999	2012-04-16 15:52	2011-09-27	Show	GitHub Exploit DB Packet Storm

249935	10	危険	Mozilla Foundation	-	Mozilla Firefox におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-189 数値処理の問題	CVE-2011-2998	2012-04-16 15:50	2011-09-27	Show	GitHub Exploit DB Packet Storm

249936	4.3	警告	アップル	-	Apple iOS の CoreGraphics の FreeType における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3256	2012-04-16 15:48	2011-10-14	Show	GitHub Exploit DB Packet Storm

249937	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Office Works ファイルコンバータにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0177	2012-04-16 13:45	2012-04-10	Show	GitHub Exploit DB Packet Storm

249938	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0172	2012-04-16 13:44	2012-04-10	Show	GitHub Exploit DB Packet Storm

249939	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0171	2012-04-16 13:43	2012-04-10	Show	GitHub Exploit DB Packet Storm

249940	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0170	2012-04-16 13:43	2012-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209301	4.4	MEDIUM Local	quickheal	total_security	Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password.	CWE-521 Weak Password Requirements	CVE-2020-27585	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

209302	9.8	CRITICAL Network	synology	safeaccess	SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter.	CWE-89 SQL Injection	CVE-2020-27660	2024-11-21 14:21	2020-11-30	Show	GitHub Exploit DB Packet Storm

209303	4.8	MEDIUM Network	synology	safeaccess	Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter.	CWE-79 Cross-site Scripting	CVE-2020-27659	2024-11-21 14:21	2020-11-30	Show	GitHub Exploit DB Packet Storm

209304	3.7	LOW Network	schedmd debian	slurm debian_linux	Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /pro…	CWE-362 Race Condition	CVE-2020-27746	2024-11-21 14:21	2020-11-28	Show	GitHub Exploit DB Packet Storm

209305	9.8	CRITICAL Network	schedmd debian	slurm debian_linux	Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.	CWE-120 Classic Buffer Overflow	CVE-2020-27745	2024-11-21 14:21	2020-11-28	Show	GitHub Exploit DB Packet Storm

209306	4.3	MEDIUM Network	glpi-project	glpi	In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-27663	2024-11-21 14:21	2020-11-27	Show	GitHub Exploit DB Packet Storm

209307	4.3	MEDIUM Network	glpi-project	glpi	In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database table (e.g., glpi_tickets, glpi_users, etc.…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-27662	2024-11-21 14:21	2020-11-27	Show	GitHub Exploit DB Packet Storm

209308	7.8	HIGH Local	trendmicro	antivirus\+_security_2020 internet_security_2020 maximum_security_2020 premium_security_2020	Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a non-protected location with high privileges (symlink att…	CWE-59 Link Following	CVE-2020-27697	2024-11-21 14:21	2020-11-19	Show	GitHub Exploit DB Packet Storm

209309	7.8	HIGH Local	trendmicro	antivirus\+_security_2020 internet_security_2020 maximum_security_2020 premium_security_2020	Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a specific Windows system directory which can lead to obtaining administrativ…	NVD-CWE-noinfo	CVE-2020-27696	2024-11-21 14:21	2020-11-19	Show	GitHub Exploit DB Packet Storm

209310	7.8	HIGH Local	trendmicro	antivirus\+_security_2020 internet_security_2020 maximum_security_2020 premium_security_2020	Trend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could be exploited by placing a malicious DLL in a local directory which can lead to obtaining administrati…	CWE-426 Untrusted Search Path	CVE-2020-27695	2024-11-21 14:21	2020-11-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed