Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 12:06 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250501 9.3 危険 シーメンス - Siemens Tecnomatix FactoryLink におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4055 2012-01-11 10:00 2012-01-8 Show GitHub Exploit DB Packet Storm
250502 4.3 警告 RHQ Project
レッドハット
- RHQ の管理インタフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3206 2012-01-11 09:59 2011-08-31 Show GitHub Exploit DB Packet Storm
250503 6.9 警告 KDE project - kcheckpass における設定済みの PAM スタックを呼び出される脆弱性 CWE-287
不適切な認証
CVE-2011-5054 2012-01-10 16:39 2012-01-6 Show GitHub Exploit DB Packet Storm
250504 2.6 注意 マイクロソフト
WordPress.org
- WordPress の wp-comments-post.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0287 2012-01-10 16:33 2012-01-3 Show GitHub Exploit DB Packet Storm
250505 4.3 警告 Igor Vlasenko - Perl 用の HTML-Template-Pro モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4616 2012-01-10 16:30 2012-01-6 Show GitHub Exploit DB Packet Storm
250506 4.3 警告 GNU Project - GnuTLS の DTLS 実装における部分的に平文に復元される脆弱性 CWE-310
暗号の問題
CVE-2012-0390 2012-01-10 16:29 2012-01-6 Show GitHub Exploit DB Packet Storm
250507 7.5 危険 Google - Google Chrome におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3922 2012-01-10 11:22 2012-01-5 Show GitHub Exploit DB Packet Storm
250508 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3921 2012-01-10 11:21 2012-01-5 Show GitHub Exploit DB Packet Storm
250509 7.8 危険 ISC, Inc.
Electric Sheep Fencing
レッドハット
- ISC DHCP サーバにおけるサービス運用妨害 (dhcp デーモンの停止) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2748 2012-01-6 19:20 2011-07-27 Show GitHub Exploit DB Packet Storm
250510 9.3 危険 Mozilla Foundation
レッドハット
- Mozilla Firefox および Thunderbird の JSSubScriptLoader における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3647 2012-01-6 19:13 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196721 7.5 HIGH
Network
st stm32f1_firmware STMicroelectronics STM32F1 devices have Incorrect Access Control. NVD-CWE-noinfo
CVE-2020-8004 2024-11-21 14:38 2020-04-6 Show GitHub Exploit DB Packet Storm
196722 9.8 CRITICAL
Network
utils-extend_project utils-extend Flaw in input validation in npm package utils-extend version 1.0.8 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using… CWE-20
 Improper Input Validation 
CVE-2020-8147 2024-11-21 14:38 2020-04-4 Show GitHub Exploit DB Packet Storm
196723 6.1 MEDIUM
Network
revive-adserver revive_adserver An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted… CWE-601
Open Redirect
CVE-2020-8143 2024-11-21 14:38 2020-04-4 Show GitHub Exploit DB Packet Storm
196724 6.8 MEDIUM
Physics
revive-adserver revive_adserver A security restriction bypass vulnerability has been discovered in Revive Adserver version < 5.0.5 by HackerOne user hoangn144. Revive Adserver, like many other applications, requires the logged in u… CWE-863
 Incorrect Authorization
CVE-2020-8142 2024-11-21 14:38 2020-04-4 Show GitHub Exploit DB Packet Storm
196725 7.2 HIGH
Network
tp-link tl-wr841n_firmware A buffer overflow in the httpd daemon on TP-Link TL-WR841N V10 (firmware version 3.16.9) devices allows an authenticated remote attacker to execute arbitrary code via a GET request to the page for th… CWE-120
Classic Buffer Overflow
CVE-2020-8423 2024-11-21 14:38 2020-04-3 Show GitHub Exploit DB Packet Storm
196726 6.3 MEDIUM
Local
opensuse texlive-filesystem
leap
A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-8017 2024-11-21 14:38 2020-04-2 Show GitHub Exploit DB Packet Storm
196727 7.0 HIGH
Local
opensuse texlive-filesystem A Race Condition Enabling Link Following vulnerability in the packaging of texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Developme… - CVE-2020-8016 2024-11-21 14:38 2020-04-2 Show GitHub Exploit DB Packet Storm
196728 7.8 HIGH
Local
exim exim A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of exim in openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: openSUSE Factory exi… - CVE-2020-8015 2024-11-21 14:38 2020-04-2 Show GitHub Exploit DB Packet Storm
196729 7.8 HIGH
Local
ui unifi_video In UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM from arbitrary file deletion and DLL hijack vulnerabilities. The issue was fixed by adjusting the .tsE… CWE-427
 Uncontrolled Search Path Element
CVE-2020-8146 2024-11-21 14:38 2020-04-2 Show GitHub Exploit DB Packet Storm
196730 6.5 MEDIUM
Network
ui unifi_video The UniFi Video Server (Windows) web interface configuration restore functionality at the “backup” and “wizard” endpoints does not implement sufficient privilege checks. Low privileged users, belongi… NVD-CWE-noinfo
CVE-2020-8145 2024-11-21 14:38 2020-04-2 Show GitHub Exploit DB Packet Storm