Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256531	7.8	危険	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2012-0931	2012-02-1 10:08	2012-01-20	Show	GitHub Exploit DB Packet Storm

256532	4.3	警告	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0930	2012-02-1 10:05	2012-01-20	Show	GitHub Exploit DB Packet Storm

256533	7.8	危険	Schneider Electric	-	Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0929	2012-02-1 10:04	2012-01-20	Show	GitHub Exploit DB Packet Storm

256534	7.2	危険	Linux	-	Linux kernel の hfs_mac2asc 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4330	2012-01-31 16:45	2011-11-14	Show	GitHub Exploit DB Packet Storm

256535	6.9	警告	Linux	-	Linux kernel の xfs_readlink 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4077	2012-01-31 16:19	2012-01-27	Show	GitHub Exploit DB Packet Storm

256536	2.1	注意	Linux	-	Linux kernel におけるサービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2203	2012-01-31 16:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

256537	2.1	注意	Linux	-	Linux kernel の tpm_read 関数における TPM コマンドの結果を読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1162	2012-01-31 16:13	2012-01-27	Show	GitHub Exploit DB Packet Storm

256538	6.9	警告	Linux	-	Linux kernel の mem_write 関数における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0056	2012-01-31 11:27	2012-01-17	Show	GitHub Exploit DB Packet Storm

256539	6.8	警告	レッドハット libexif オラクル	-	Libexif の EXIF イメージ処理における整数オーバーフローの脆弱性	-	CVE-2006-4168	2012-01-30 18:51	2007-06-14	Show	GitHub Exploit DB Packet Storm

256540	5.1	警告	Hardened-PHP Project	-	PHP 用 Suhosin におけるスタックベースのバッファオーバフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0807	2012-01-30 15:15	2012-01-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
245991	5.4	MEDIUM Network	magazine3	amp_for_wp	ampforwp_save_steps_data in the AMP for WP plugin before 0.9.97.21 for WordPress allows stored XSS.	CWE-79 Cross-site Scripting	CVE-2018-20838	2024-11-21 13:02	2019-05-13	Show	GitHub Exploit DB Packet Storm

245992	4.8	MEDIUM Network	typesettercms	typesetter	include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS.	CWE-79 Cross-site Scripting	CVE-2018-20837	2024-11-21 13:02	2019-05-10	Show	GitHub Exploit DB Packet Storm

245993	8.1	HIGH Network	linux canonical debian f5 netapp opensuse	linux_kernel ubuntu_linux debian_linux traffix_signaling_delivery_controller virtual_storage_console active_iq_unified_manager vasa_provider_for_clustered_data_ontap solidfire_\&…	An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.	CWE-362 CWE-416 Race Condition Use After Free	CVE-2018-20836	2024-11-21 13:02	2019-05-7	Show	GitHub Exploit DB Packet Storm

245994	6.1	MEDIUM Network	atlassian	jira	The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.	CWE-79 Cross-site Scripting	CVE-2018-20824	2024-11-21 13:02	2019-05-4	Show	GitHub Exploit DB Packet Storm

245995	7.5	HIGH Network	tar-fs_project	tar-fs	A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction…	CWE-20 Improper Input Validation	CVE-2018-20835	2024-11-21 13:02	2019-05-1	Show	GitHub Exploit DB Packet Storm

245996	7.5	HIGH Network	node-tar_project	node-tar	A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already e…	CWE-59 Link Following	CVE-2018-20834	2024-11-21 13:02	2019-05-1	Show	GitHub Exploit DB Packet Storm

245997	7.5	HIGH Network	mi	mi_5s_firmware	The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasound attack.	CWE-20 Improper Input Validation	CVE-2018-20823	2024-11-21 13:02	2019-04-25	Show	GitHub Exploit DB Packet Storm

245998	6.5	MEDIUM Network	sass-lang	libsass	LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::Inspect::operator in inspect.cpp).	CWE-674 Uncontrolled Recursion	CVE-2018-20822	2024-11-21 13:02	2019-04-23	Show	GitHub Exploit DB Packet Storm

245999	6.5	MEDIUM Network	sass-lang	libsass	The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_css_variable_value in parser.cpp).	CWE-674 Uncontrolled Recursion	CVE-2018-20821	2024-11-21 13:02	2019-04-23	Show	GitHub Exploit DB Packet Storm

246000	5.5	MEDIUM Local	dropbox	lepton	read_ujpg in jpgcoder.cc in Dropbox Lepton 1.2.1 allows attackers to cause a denial-of-service (application runtime crash because of an integer overflow) via a crafted file.	CWE-190 Integer Overflow or Wraparound	CVE-2018-20820	2024-11-21 13:02	2019-04-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed