Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252011 7.2 危険 GNOME Project - gnome-power-manager における無人のラップトップにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2006-7240 2012-03-27 18:42 2010-09-7 Show GitHub Exploit DB Packet Storm
252012 5 警告 Apache Software Foundation - Apache Wicket におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-1089 2012-03-27 14:46 2012-03-23 Show GitHub Exploit DB Packet Storm
252013 4.3 警告 Apache Software Foundation - Apache Wicket におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0047 2012-03-27 14:43 2012-03-23 Show GitHub Exploit DB Packet Storm
252014 5 警告 Google - Google Chrome におけるサービス運用妨害 (システムリクエスト妨害) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3049 2012-03-27 14:26 2012-03-21 Show GitHub Exploit DB Packet Storm
252015 10 危険 Google - Google Chrome におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1846 2012-03-27 14:21 2012-03-22 Show GitHub Exploit DB Packet Storm
252016 10 危険 Google - Google Chrome における DEP および ASLR 保護メカニズムを回避される脆弱性 CWE-399
リソース管理の問題
CVE-2012-1845 2012-03-27 14:19 2012-03-22 Show GitHub Exploit DB Packet Storm
252017 5 警告 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2011-3057 2012-03-27 14:08 2012-03-22 Show GitHub Exploit DB Packet Storm
252018 6.8 警告 Google - Google Chrome の browser native UI における詳細不明な脆弱性 CWE-Other
その他
CVE-2011-3055 2012-03-27 14:05 2012-03-21 Show GitHub Exploit DB Packet Storm
252019 5 警告 Google - Google Chrome の WebUI 権限の実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3054 2012-03-27 14:04 2012-03-21 Show GitHub Exploit DB Packet Storm
252020 7.5 危険 Google - Google Chrome の WebGL 実装におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2011-3052 2012-03-27 13:58 2012-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202821 6.5 MEDIUM
Network
droppy_project droppy This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server. CWE-22
Path Traversal
CVE-2020-7757 2024-11-21 14:37 2020-11-3 Show GitHub Exploit DB Packet Storm
202822 9.8 CRITICAL
Network
vbulletin vbulletin vBulletin 5.5.4 through 5.6.2 allows remote command execution via crafted subWidgets data in an ajax/render/widget_tabbedcontainer_tab_panel request. NOTE: this issue exists because of an incomplete … CWE-94
Code Injection
CVE-2020-7373 2024-11-21 14:37 2020-10-31 Show GitHub Exploit DB Packet Storm
202823 7.5 HIGH
Network
codemirror
oracle
codemirror
application_express
essbase
enterprise_manager_express_user_interface
hyperion_data_relationship_management
spatial_studio
This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/Code… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-7760 2024-11-21 14:37 2020-10-30 Show GitHub Exploit DB Packet Storm
202824 7.2 HIGH
Network
pimcore pimcore The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificationstoreController. This can be exploited by sending a speci… CWE-89
SQL Injection
CVE-2020-7759 2024-11-21 14:37 2020-10-30 Show GitHub Exploit DB Packet Storm
202825 7.8 HIGH
Local
rapid7 metasploit Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine. CWE-77
Command Injection
CVE-2020-7384 2024-11-21 14:37 2020-10-30 Show GitHub Exploit DB Packet Storm
202826 9.8 CRITICAL
Network
chartjs chart.js This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options (or the defaults options) ar… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7746 2024-11-21 14:37 2020-10-29 Show GitHub Exploit DB Packet Storm
202827 7.5 HIGH
Network
dat.gui_project dat.gui All versions of package dat.gui are vulnerable to Regular Expression Denial of Service (ReDoS) via specifically crafted rgb and rgba values. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-7755 2024-11-21 14:37 2020-10-28 Show GitHub Exploit DB Packet Storm
202828 7.5 HIGH
Network
npmjs npm-user-validate This affects the package npm-user-validate before 1.0.1. The regex that validates user emails took exponentially longer to process long input strings beginning with @ characters. NVD-CWE-noinfo
CVE-2020-7754 2024-11-21 14:37 2020-10-28 Show GitHub Exploit DB Packet Storm
202829 7.5 HIGH
Network
trim_project trim All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim(). CWE-400
 Uncontrolled Resource Consumption
CVE-2020-7753 2024-11-21 14:37 2020-10-27 Show GitHub Exploit DB Packet Storm
202830 8.8 HIGH
Network
systeminformation systeminformation This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execu… CWE-78
OS Command 
CVE-2020-7752 2024-11-21 14:37 2020-10-27 Show GitHub Exploit DB Packet Storm