Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250911 6.8 警告 IBM - 複数の IBM 製品の Labor Reporting ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1397 2012-03-14 16:22 2012-02-14 Show GitHub Exploit DB Packet Storm
250912 6.5 警告 IBM - 複数の IBM 製品 の KPI コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4816 2012-03-14 16:08 2012-02-14 Show GitHub Exploit DB Packet Storm
250913 4 警告 IBM - 複数の IBM 製品 の Help メニューの About オプションにおける詳細不明な脆弱性 CWE-200
情報漏えい 		CVE-2011-4817 2012-03-14 16:07 2012-02-14 Show GitHub Exploit DB Packet Storm
250914 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4818 2012-03-14 16:06 2012-02-14 Show GitHub Exploit DB Packet Storm
250915 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4819 2012-03-14 16:05 2012-02-14 Show GitHub Exploit DB Packet Storm
250916 4.3 警告 IBM - 複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0195 2012-03-14 16:04 2012-02-14 Show GitHub Exploit DB Packet Storm
250917 5 警告 アップル - Apple Safari の WebKit における認証情報をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2012-0647 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
250918 5 警告 アップル - Apple Safari の WebKit におけるユーザを追跡される脆弱性 CWE-200
情報漏えい 		CVE-2012-0640 2012-03-14 15:52 2012-03-12 Show GitHub Exploit DB Packet Storm
250919 6.4 警告 アップル - Windows 上で稼働する Apple Safari の IDN 機能におけるドメイン名を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0584 2012-03-14 15:34 2012-03-12 Show GitHub Exploit DB Packet Storm
250920 6.4 警告 VMware - VMware vCenter Chargeback Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1472 2012-03-14 15:15 2012-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209371 6.8 MEDIUM
Adjacent 		ti real-time_operating_system
z-stack
15.4-stack
openthread
easylink
ble5-stack
dynamic_multi-protocal_manager 		TI’s BLE stack caches and reuses the LTK’s property for a bonded mobile. A LTK can be an unauthenticated-and-no-MITM-protection key created by Just Works or an authenticated-and-MITM-protection key c… CWE-863
 Incorrect Authorization 		CVE-2020-16630 2024-11-21 14:07 2021-09-21 Show GitHub Exploit DB Packet Storm
209372 7.5 HIGH
Network 		crestron dm-nvx-dir-80_firmware
dm-nvx-dir-160_firmware
dm-nvx-dir-ent_firmware 		On Crestron DM-NVX-DIR, DM-NVX-DIR80, and DM-NVX-ENT devices before the DM-XIO/1-0-3-802 patch, the password can be changed by sending an unauthenticated WebSocket request. CWE-287
Improper Authentication 		CVE-2020-16839 2024-11-21 14:07 2021-07-30 Show GitHub Exploit DB Packet Storm
209373 5.4 MEDIUM
Network 		dedecms dedecms A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter. CWE-79
Cross-site Scripting 		CVE-2020-16632 2024-11-21 14:07 2021-05-15 Show GitHub Exploit DB Packet Storm
209374 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		Microsoft Windows Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2020-17162 2024-11-21 14:07 2021-02-26 Show GitHub Exploit DB Packet Storm
209375 7.8 HIGH
Local 		we-con levistudiou Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and… CWE-787
 Out-of-bounds Write 		CVE-2020-16243 2024-11-21 14:07 2021-02-24 Show GitHub Exploit DB Packet Storm
209376 9.8 CRITICAL
Network 		phpok phpok PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the targe… CWE-89
SQL Injection 		CVE-2020-16629 2024-11-21 14:07 2021-02-9 Show GitHub Exploit DB Packet Storm
209377 6.3 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() r… CWE-787
 Out-of-bounds Write 		CVE-2020-17380 2024-11-21 14:07 2021-01-30 Show GitHub Exploit DB Packet Storm
209378 6.1 MEDIUM
Network 		owncloud owncloud ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' CWE-79
Cross-site Scripting 		CVE-2020-16255 2024-11-21 14:07 2021-01-16 Show GitHub Exploit DB Packet Storm
209379 9.9 CRITICAL
Network 		usvn usvn USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the… CWE-78
OS Command  		CVE-2020-17363 2024-11-21 14:07 2020-12-31 Show GitHub Exploit DB Packet Storm
209380 8.8 HIGH
Network 		1e client The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a T… CWE-74
CWE-668
Injection
 Exposure of Resource to Wrong Sphere 		CVE-2020-16268 2024-11-21 14:07 2020-12-30 Show GitHub Exploit DB Packet Storm