Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252041 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバにおける権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-0154 2012-02-20 18:30 2012-02-14 Show GitHub Exploit DB Packet Storm
252042 7.2 危険 マイクロソフト - Microsoft Windows の afd.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0148 2012-02-20 18:28 2012-02-14 Show GitHub Exploit DB Packet Storm
252043 7.2 危険 マイクロソフト - Microsoft Windows Server 2003 の afd.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-0149 2012-02-20 18:27 2012-02-14 Show GitHub Exploit DB Packet Storm
252044 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-0010 2012-02-20 18:24 2012-02-14 Show GitHub Exploit DB Packet Storm
252045 9.3 危険 マイクロソフト - Microsoft Internet Explorer 7 から 9 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0011 2012-02-20 18:22 2012-02-14 Show GitHub Exploit DB Packet Storm
252046 4.3 警告 マイクロソフト - Microsoft Internet Explorer 9 におけるデータを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-0012 2012-02-20 18:20 2012-02-14 Show GitHub Exploit DB Packet Storm
252047 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0155 2012-02-20 18:18 2012-02-14 Show GitHub Exploit DB Packet Storm
252048 4.3 警告 マイクロソフト - Microsoft SharePoint Foundation 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0017 2012-02-20 18:16 2012-02-14 Show GitHub Exploit DB Packet Storm
252049 4.3 警告 マイクロソフト - Microsoft Office SharePoint の themeweb.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0144 2012-02-20 18:14 2012-02-14 Show GitHub Exploit DB Packet Storm
252050 4.3 警告 マイクロソフト - Microsoft Office SharePoint の wizardlist.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0145 2012-02-20 18:12 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202551 8.8 HIGH
Network 		riken xoonips SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2020-5659 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
202552 7.5 HIGH
Network 		mitsubishielectric melsec_iq-r00_firmware
melsec_iq-r01_firmware
melsec_iq-r02_firmware
melsec_iq-r04_firmware
melsec_iq-r16_firmware
melsec_iq-r08_firmware
melsec_iq-r32_firmware
melsec_iq-r120_fi… 		Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') al… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5666 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
202553 7.8 HIGH
Local 		nagios nagios_xi Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users being able to write to… CWE-281
 Improper Preservation of Permissions 		CVE-2020-5796 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
202554 7.5 HIGH
Network 		valvesoftware game_networking_sockets Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from li… NVD-CWE-noinfo
CVE-2020-6019 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
202555 7.8 HIGH
Local 		nvidia geforce_now NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to bin… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-5992 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
202556 9.8 CRITICAL
Network 		vmware pivotal_scheduler Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-5426 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
202557 6.9 MEDIUM
Physics 		dell inspiron_15_7579_firmware Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-5388 2024-11-21 14:34 2020-11-11 Show GitHub Exploit DB Packet Storm
202558 7.8 HIGH
Local 		tenable nessus_network_monitor A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a spe… NVD-CWE-noinfo
CVE-2020-5794 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
202559 6.2 MEDIUM
Physics 		tp-link archer_a7_firmware UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a craft… CWE-59
Link Following 		CVE-2020-5795 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
202560 5.5 MEDIUM
Local 		wantedlyinc studyplus Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external … CWE-798
 Use of Hard-coded Credentials 		CVE-2020-5667 2024-11-21 14:34 2020-11-6 Show GitHub Exploit DB Packet Storm