Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250081 9.3 危険 ヒューレット・パッカード - HP Network Automation における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4790 2012-02-3 16:30 2012-01-30 Show GitHub Exploit DB Packet Storm
250082 2.1 注意 Mozilla Foundation - Mozilla Firefox および SeaMonkey における Firefox Sync キーを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0450 2012-02-3 16:29 2012-01-31 Show GitHub Exploit DB Packet Storm
250083 5 警告 Mozilla Foundation - 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3670 2012-02-3 16:22 2012-01-31 Show GitHub Exploit DB Packet Storm
250084 7.5 危険 Novell - Novell Open Enterprise Server 2 の GetDriverSettings 関数 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3173 2012-02-3 16:11 2011-11-1 Show GitHub Exploit DB Packet Storm
250085 4.3 警告 Earl Miles - Drupal 用 Panels モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0914 2012-02-2 16:59 2012-01-24 Show GitHub Exploit DB Packet Storm
250086 7.2 危険 Todd C. Miller - Sudo の sudo_debug 関数における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題
CVE-2012-0809 2012-02-2 14:18 2012-02-1 Show GitHub Exploit DB Packet Storm
250087 5 警告 Samba Project - Samba におけるサービス運用妨害 (メモリおよび CPU 資源の消費) の脆弱性 CWE-200
情報漏えい
CVE-2012-0817 2012-02-1 16:29 2012-01-29 Show GitHub Exploit DB Packet Storm
250088 4.9 警告 KVM - KVM の arch/x86/kvm/i8254.c におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-noinfo
情報不足
CVE-2011-4622 2012-02-1 16:28 2012-01-27 Show GitHub Exploit DB Packet Storm
250089 7.5 危険 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4608 2012-02-1 16:27 2012-01-18 Show GitHub Exploit DB Packet Storm
250090 5.8 警告 Kay Framework
OpenID
レッドハット
- OpenID4Java の message/ax/AxMessage.java における AX 情報を変更される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4314 2012-02-1 16:26 2011-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210821 5.4 MEDIUM
Network
enhancesoft osticket include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name. CWE-79
Cross-site Scripting
CVE-2020-12629 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
210822 4.7 MEDIUM
Local
linux linux_kernel A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to … CWE-362
Race Condition
CVE-2020-12114 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
210823 9.8 CRITICAL
Network
janeczku calibre-web Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key. CWE-798
 Use of Hard-coded Credentials
CVE-2020-12627 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
210824 6.5 MEDIUM
Network
roundcube
debian
webmail
debian_linux
An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. CWE-352
 Origin Validation Error
CVE-2020-12626 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
210825 6.1 MEDIUM
Network
roundcube
debian
opensuse
webmail
debian_linux
leap
backports_sle
An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. CWE-79
Cross-site Scripting
CVE-2020-12625 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
210826 6.5 MEDIUM
Network
theleague the_league The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, whic… CWE-459
 Incomplete Cleanup
CVE-2020-12624 2024-11-21 13:59 2020-05-3 Show GitHub Exploit DB Packet Storm
210827 6.5 MEDIUM
Network
telegram telegram
telegram_desktop
Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL. NVD-CWE-noinfo
CVE-2020-12474 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
210828 5.3 MEDIUM
Network
moxa nport_5100a_firmware Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthentic… CWE-306
Missing Authentication for Critical Function
CVE-2020-12117 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
210829 7.0 HIGH
Local
fedoraproject
opensuse
sqliteodbc_project
fedora
backports_sle
sqliteodbc
SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new co… CWE-362
Race Condition
CVE-2020-12050 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
210830 4.3 MEDIUM
Network
xt-commerce xt-commerce The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an … CWE-276
Incorrect Default Permissions 
CVE-2020-12101 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm