Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253141	7.5	危険	SQLAlchemy	-	Keystone で使用される SQLAlchemy における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0805	2012-06-7 15:17	2012-06-5	Show	GitHub Exploit DB Packet Storm

253142	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の glBufferData 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-3105	2012-06-7 15:14	2012-06-5	Show	GitHub Exploit DB Packet Storm

253143	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の utf16_to_isolatin1 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1947	2012-06-7 15:11	2012-06-5	Show	GitHub Exploit DB Packet Storm

253144	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の nsINode::ReplaceOrInsertBefore 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2012-1946	2012-06-7 15:08	2012-06-5	Show	GitHub Exploit DB Packet Storm

253145	2.9	注意	Mozilla Foundation	-	複数の Mozilla 製品における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1945	2012-06-7 15:04	2012-06-5	Show	GitHub Exploit DB Packet Storm

253146	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品の CSP の実装におけるクロスサイトスクリプティング攻撃を実行される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1944	2012-06-7 15:00	2012-06-5	Show	GitHub Exploit DB Packet Storm

253147	6.9	警告	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における権限を取得される脆弱性	CWE-Other その他	CVE-2012-1943	2012-06-7 14:54	2012-06-5	Show	GitHub Exploit DB Packet Storm

253148	7.2	危険	Mozilla Foundation	-	Windows 上で稼働する複数の Mozilla 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1942	2012-06-7 14:52	2012-06-5	Show	GitHub Exploit DB Packet Storm

253149	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1941	2012-06-7 14:42	2012-06-5	Show	GitHub Exploit DB Packet Storm

253150	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-1938	2012-06-7 14:25	2012-06-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246211	6.5	MEDIUM Network	atlassian	universal_plugin_manager	The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perfo…	CWE-611 XXE	CVE-2018-20233	2024-11-21 13:01	2019-01-19	Show	GitHub Exploit DB Packet Storm

246212	7.5	HIGH Network	winscp	winscp	In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SC…	CWE-20 Improper Input Validation	CVE-2018-20684	2024-11-21 13:01	2019-01-11	Show	GitHub Exploit DB Packet Storm

246213	5.3	MEDIUM Network	openbsd winscp netapp debian canonical redhat oracle fujitsu siemens	openssh winscp cloud_backup element_software storage_automation_store ontap_select_deploy steelstore_cloud_integrated_storage debian_linux ubuntu_linux enterprise_linux …	In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the tar…	CWE-863 Incorrect Authorization	CVE-2018-20685	2024-11-21 13:01	2019-01-11	Show	GitHub Exploit DB Packet Storm

246214	8.1	HIGH Network	gitolite	gitolite	commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v,…	CWE-20 Improper Input Validation	CVE-2018-20683	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246215	5.4	MEDIUM Network	fork-cms	fork_cms	Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).	CWE-79 Cross-site Scripting	CVE-2018-20682	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246216	6.1	MEDIUM Physics	mate-desktop	mate-screensaver	mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycli…	CWE-200 Information Exposure	CVE-2018-20681	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246217	4.8	MEDIUM Network	frog_cms_project	frog_cms	Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.	CWE-79 Cross-site Scripting	CVE-2018-20680	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246218	7.5	HIGH Network	busybox canonical	busybox ubuntu_linux	An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information fro…	CWE-125 Out-of-bounds Read	CVE-2018-20679	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246219	6.1	MEDIUM Network	getbootstrap	bootstrap	In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.	CWE-79 Cross-site Scripting	CVE-2018-20677	2024-11-21 13:01	2019-01-9	Show	GitHub Exploit DB Packet Storm

246220	6.1	MEDIUM Network	getbootstrap	bootstrap	In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.	CWE-79 Cross-site Scripting	CVE-2018-20676	2024-11-21 13:01	2019-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed