Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252311	4.3	警告	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0930	2012-02-1 10:05	2012-01-20	Show	GitHub Exploit DB Packet Storm

252312	7.8	危険	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0929	2012-02-1 10:04	2012-01-20	Show	GitHub Exploit DB Packet Storm

252313	7.2	危険	Linux	-	Linux kernel の hfs_mac2asc 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4330	2012-01-31 16:45	2011-11-14	Show	GitHub Exploit DB Packet Storm

252314	6.9	警告	Linux	-	Linux kernel の xfs_readlink 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4077	2012-01-31 16:19	2012-01-27	Show	GitHub Exploit DB Packet Storm

252315	2.1	注意	Linux	-	Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2203	2012-01-31 16:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

252316	2.1	注意	Linux	-	Linux kernel の tpm_read 関数における TPM コマンドの結果を読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1162	2012-01-31 16:13	2012-01-27	Show	GitHub Exploit DB Packet Storm

252317	6.9	警告	Linux	-	Linux kernel の mem_write 関数における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0056	2012-01-31 11:27	2012-01-17	Show	GitHub Exploit DB Packet Storm

252318	6.8	警告	レッドハット libexif オラクル	-	Libexif の EXIF イメージ処理における整数オーバーフローの脆弱性	-	CVE-2006-4168	2012-01-30 18:51	2007-06-14	Show	GitHub Exploit DB Packet Storm

252319	5.1	警告	Hardened-PHP Project	-	PHP 用 Suhosin におけるスタックベースのバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0807	2012-01-30 15:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

252320	6.5	警告	DuckCorp Projects	-	Bip におけるバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0806	2012-01-30 15:13	2012-01-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208581	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. T…	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25803	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208582	3.2	LOW Local	qemu redhat	qemu enterprise_linux openstack_platform	hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.	CWE-476 NULL Pointer Dereference	CVE-2020-25743	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208583	3.2	LOW Local	qemu	qemu	pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.	CWE-476 NULL Pointer Dereference	CVE-2020-25742	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208584	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: …	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25802	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208585	7.5	HIGH Network	redhat netapp	wildfly_openssl jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid openshift_application_runtimes data_grid oncommand_workflow_automation oncomman…	A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-25644	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208586	7.2	HIGH Network	linux redhat opensuse debian netapp starwindsoftware	linux_kernel enterprise_linux leap debian_linux h410c_firmware starwind_virtual_san	A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function wh…	-	CVE-2020-25643	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208587	5.5	MEDIUM Local	linux redhat opensuse debian canonical	linux_kernel enterprise_linux leap debian_linux ubuntu_linux	A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loo…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-25641	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208588	6.7	MEDIUM Local	redhat opensuse	libvirt leap	A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects…	-	CVE-2020-25637	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208589	7.5	HIGH Network	ruby-lang fedoraproject	ruby webrick fedora	An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigoro…	CWE-444 HTTP Request Smuggling	CVE-2020-25613	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208590	5.5	MEDIUM Local	redhat	ansible	A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Th…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-25635	2024-11-21 14:18	2020-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed