Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249951 4.3 警告 freelancerKit - freelancerKit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1219 2012-02-22 16:18 2012-02-21 Show GitHub Exploit DB Packet Storm
249952 7.5 危険 freelancerKit - freelancerKit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1218 2012-02-22 16:15 2012-02-21 Show GitHub Exploit DB Packet Storm
249953 4.3 警告 Zenphoto - Zenphoto におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0995 2012-02-22 16:12 2012-02-21 Show GitHub Exploit DB Packet Storm
249954 6 警告 Zenphoto - Zenphoto の Manage Albums 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0994 2012-02-22 16:09 2012-02-21 Show GitHub Exploit DB Packet Storm
249955 6.8 警告 Zenphoto - Zenphoto の viewer_size_image.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0993 2012-02-22 16:07 2012-02-21 Show GitHub Exploit DB Packet Storm
249956 4 警告 IBM - IBM solidDB のサーバにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-0200 2012-02-22 15:31 2012-02-7 Show GitHub Exploit DB Packet Storm
249957 4 警告 IBM - IBM solidDB のサーバにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4890 2012-02-22 15:30 2011-11-17 Show GitHub Exploit DB Packet Storm
249958 4.3 警告 SIMHL - STHS v2 Web Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1217 2012-02-22 15:24 2012-02-21 Show GitHub Exploit DB Packet Storm
249959 6 警告 PBBoard - PBBoard の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1216 2012-02-22 15:23 2012-02-21 Show GitHub Exploit DB Packet Storm
249960 7.5 危険 Dolibarr ERP & CRM - Dolibarr CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1226 2012-02-22 14:37 2012-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210841 5.4 MEDIUM
Network 		boolebox boolebox BooleBox Secure File Sharing Utility before 4.2.3.0 allows stored XSS via a crafted avatar field within My Account JSON data to Account.aspx. CWE-79
Cross-site Scripting 		CVE-2020-13248 2024-11-21 14:00 2020-06-25 Show GitHub Exploit DB Packet Storm
210842 5.7 MEDIUM
Adjacent 		sane-project
canonical
opensuse 		sane_backends
ubuntu_linux
leap 		A NULL pointer dereference in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079. CWE-476
 NULL Pointer Dereference 		CVE-2020-12866 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210843 8.0 HIGH
Adjacent 		sane-project
debian
canonical
opensuse 		sane_backends
debian_linux
ubuntu_linux
leap 		A heap buffer overflow in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-084. CWE-787
 Out-of-bounds Write 		CVE-2020-12865 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210844 4.3 MEDIUM
Adjacent 		sane-project
opensuse
canonical 		sane_backends
leap
ubuntu_linux 		An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the prog… CWE-125
Out-of-bounds Read 		CVE-2020-12864 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210845 4.3 MEDIUM
Adjacent 		sane-project
debian
canonical
opensuse 		sane_backends
debian_linux
ubuntu_linux
leap 		An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the prog… CWE-125
Out-of-bounds Read 		CVE-2020-12863 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210846 4.3 MEDIUM
Adjacent 		sane-project
debian
canonical
opensuse 		sane_backends
debian_linux
ubuntu_linux
leap 		An out-of-bounds read in SANE Backends before 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the prog… CWE-125
Out-of-bounds Read 		CVE-2020-12862 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210847 8.8 HIGH
Adjacent 		sane-project
canonical
opensuse 		sane_backends
ubuntu_linux
leap 		A heap buffer overflow in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to execute arbitrary code, aka GHSL-2020-080. CWE-787
 Out-of-bounds Write 		CVE-2020-12861 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210848 6.5 MEDIUM
Network 		nukeviet nukeviet modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed. CWE-352
 Origin Validation Error 		CVE-2020-13157 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210849 6.5 MEDIUM
Network 		nukeviet nukeviet modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI. CWE-352
 Origin Validation Error 		CVE-2020-13156 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm
210850 8.8 HIGH
Network 		nukeviet nukeviet clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI. CWE-352
 Origin Validation Error 		CVE-2020-13155 2024-11-21 14:00 2020-06-24 Show GitHub Exploit DB Packet Storm