Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249941 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0169 2012-04-16 13:42 2012-04-10 Show GitHub Exploit DB Packet Storm
249942 7.6 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0168 2012-04-16 13:40 2012-04-10 Show GitHub Exploit DB Packet Storm
249943 5 警告 マイクロソフト - Microsoft Forefront Unified Access Gateway における重要な情報を取得される脆弱性 CWE-16
環境設定 		CVE-2012-0147 2012-04-16 13:37 2012-04-10 Show GitHub Exploit DB Packet Storm
249944 5.8 警告 マイクロソフト - Microsoft Forefront Unified Access Gateway におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0146 2012-04-16 13:35 2012-04-10 Show GitHub Exploit DB Packet Storm
249945 3.7 注意 ヒューレット・パッカード - HP ProCurve 5400 zl スイッチシリーズにおける任意のコードを実行される脆弱性 CWE-DesignError
CVE-2012-0133 2012-04-13 16:24 2012-04-10 Show GitHub Exploit DB Packet Storm
249946 6.8 警告 ヒューレット・パッカード - HP System Management Homepage におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-3846 2012-04-13 16:19 2012-04-12 Show GitHub Exploit DB Packet Storm
249947 6.5 警告 Cloudera, Inc. - Cloudera Manager および Cloudera Service and Configuration Manager における任意のユーザアカウントになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2012-2230 2012-04-13 15:35 2011-04-12 Show GitHub Exploit DB Packet Storm
249948 6.5 警告 Cloudera, Inc.
Apache Software Foundation		 - Cloudera 製品で使用される Apache Hadoop における任意のクラスタユーザアカウントになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2012-1574 2012-04-13 15:33 2012-04-12 Show GitHub Exploit DB Packet Storm
249949 5.8 警告 株式会社リクルート - どこでもリクナビ2013 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1240 2012-04-13 12:02 2012-04-13 Show GitHub Exploit DB Packet Storm
249950 5.8 警告 COM Meets Ruby - ActiveScriptRuby に HTML 上で任意の Ruby スクリプトを実行可能な脆弱性 CWE-Other
その他 		CVE-2012-1241 2012-04-13 12:01 2012-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209281 6.1 MEDIUM
Network 		os4ed opensis OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter. CWE-79
Cross-site Scripting 		CVE-2020-27409 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209282 7.5 HIGH
Network 		os4ed opensis OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users. CWE-287
CWE-640
Improper Authentication
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2020-27408 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209283 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27771 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209284 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27770 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209285 7.8 HIGH
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27766 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209286 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.… CWE-369
 Divide By Zero 		CVE-2020-27765 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209287 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27767 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
209288 6.8 MEDIUM
Local 		canonical snapcraft
ubuntu_linux 		In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-27348 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
209289 6.1 MEDIUM
Network 		lxml
redhat
debian
fedoraproject
netapp
oracle 		lxml
enterprise_linux
software_collections
debian_linux
fedora
snapcenter
communications_offline_mediation_controller
zfs_storage_appliance_kit 		A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r… - CVE-2020-27783 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
209290 7.5 HIGH
Network 		freedesktop
redhat
debian 		poppler
enterprise_linux
debian_linux 		A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' … CWE-824
 Access of Uninitialized Pointer 		CVE-2020-27778 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm