Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250541 4.3 警告 OSQA - OSQA の questions/ask におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1782 2012-03-22 16:33 2012-03-19 Show GitHub Exploit DB Packet Storm
250542 4.3 警告 Dotclear - Dotclear におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1039 2012-03-22 16:18 2012-03-19 Show GitHub Exploit DB Packet Storm
250543 4.3 警告 Oxwall - OxWall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0872 2012-03-22 16:17 2012-03-19 Show GitHub Exploit DB Packet Storm
250544 4.3 警告 SocialCMS - SocialCMS の ajax/commentajax.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1781 2012-03-22 16:15 2012-03-19 Show GitHub Exploit DB Packet Storm
250545 7.5 危険 SocialCMS - SocialCMS の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1780 2012-03-22 16:14 2012-03-19 Show GitHub Exploit DB Packet Storm
250546 9.3 危険 マイクロソフト - Microsoft Windows のリモートデスクトッププロトコルの実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0002 2012-03-22 13:40 2012-03-13 Show GitHub Exploit DB Packet Storm
250547 9.3 危険 VideoLAN - VideoLAN VLC media player におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1776 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
250548 9.3 危険 VideoLAN - VideoLAN VLC media player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1775 2012-03-21 16:50 2012-03-12 Show GitHub Exploit DB Packet Storm
250549 10 危険 Gretech - Gretech GOM Media Player の Open URL 機能における脆弱性 CWE-noinfo
情報不足 		CVE-2012-1774 2012-03-21 16:38 2012-03-18 Show GitHub Exploit DB Packet Storm
250550 9.3 危険 Gretech - Gretech GOM Media Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2012-1264 2012-03-21 16:37 2012-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214191 9.1 CRITICAL
Network 		cpanel cpanel cPanel before 84.0.20 allows a demo account to modify files via Branding API calls (SEC-543). NVD-CWE-noinfo
CVE-2020-10118 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214192 9.1 CRITICAL
Network 		cpanel cpanel cPanel before 84.0.20 mishandles enforcement of demo checks in the Market UAPI namespace (SEC-542). NVD-CWE-noinfo
CVE-2020-10117 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214193 5.3 MEDIUM
Network 		cpanel cpanel cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541). CWE-862
 Missing Authorization 		CVE-2020-10116 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214194 7.2 HIGH
Network 		cpanel cpanel cPanel before 84.0.20, when PowerDNS is used, allows arbitrary code execution as root via dnsadmin. (SEC-537). NVD-CWE-noinfo
CVE-2020-10115 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214195 6.1 MEDIUM
Network 		cpanel cpanel cPanel before 84.0.20 allows stored self-XSS via the HTML file editor (SEC-535). CWE-79
Cross-site Scripting 		CVE-2020-10114 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214196 6.1 MEDIUM
Network 		cpanel cpanel cPanel before 84.0.20 allows self XSS via a temporary character-set specification (SEC-515). CWE-79
Cross-site Scripting 		CVE-2020-10113 2024-11-21 13:54 2020-03-18 Show GitHub Exploit DB Packet Storm
214197 9.8 CRITICAL
Network 		gitlab gitlab GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery risk. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-10077 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm
214198 6.1 MEDIUM
Network 		gitlab gitlab GitLab 12.1 through 12.8.1 allows XSS. A stored cross-site scripting vulnerability was discovered when displaying merge requests. CWE-79
Cross-site Scripting 		CVE-2020-10076 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm
214199 6.1 MEDIUM
Network 		gitlab gitlab GitLab 12.5 through 12.8.1 allows HTML Injection. A particular error header was potentially susceptible to injection or potentially other vulnerabilities via unescaped input. CWE-79
Cross-site Scripting 		CVE-2020-10075 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm
214200 9.8 CRITICAL
Network 		gitlab gitlab GitLab 10.1 through 12.8.1 has Incorrect Access Control. A scenario was discovered in which a GitLab account could be taken over through an expired link. NVD-CWE-noinfo
CVE-2020-10074 2024-11-21 13:54 2020-03-14 Show GitHub Exploit DB Packet Storm