Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225441	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0866	2013-03-26 15:12	2011-06-10	Show	GitHub Exploit DB Packet Storm

225442	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0864	2013-03-26 15:10	2011-06-7	Show	GitHub Exploit DB Packet Storm

225443	10	危険	サン・マイクロシステムズヒューレット・パッカード	-	Windows 上で稼働する複数の Oracle Java SE の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0817	2013-03-26 15:06	2011-06-7	Show	GitHub Exploit DB Packet Storm

225444	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start におけるポリシーファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0788	2013-03-26 15:04	2011-06-10	Show	GitHub Exploit DB Packet Storm

225445	6.9	警告	Linux	-	Linux Kernel の net/sctp/socket.c における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1828	2013-03-26 15:04	2013-03-20	Show	GitHub Exploit DB Packet Storm

225446	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における設定ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0786	2013-03-26 14:44	2011-06-10	Show	GitHub Exploit DB Packet Storm

225447	2.6	注意	株式会社ピーエムナイン	-	OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2300	2013-03-26 12:02	2013-03-26	Show	GitHub Exploit DB Packet Storm

225448	2.6	注意	COB's Products	-	COBIME におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0720	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

225449	2.6	注意	codedesign.jp	-	ArtIME 日本語入力におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0719	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

225450	2.6	注意	Baidu, Inc.	-	Simeji におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0718	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197681	4.4	MEDIUM Local	suse	caas_platform	A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitr…	-	CVE-2020-8030	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197682	4.0	MEDIUM Local	suse	caas_platform	A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platfor…	-	CVE-2020-8029	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197683	5.4	MEDIUM Network	opensuse	open_build_service	A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly es…	-	CVE-2020-8031	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197684	6.6	MEDIUM Local	opensuse	openldap2	A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to…	-	CVE-2020-8027	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197685	4.9	MEDIUM Network	lenovo	xclarity_administrator	An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-8355	2024-11-21 14:38	2021-02-11	Show	GitHub Exploit DB Packet Storm

197686	5.4	MEDIUM Network	nextcloud	nextcloud_server	A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack using Internet Explorer when saving a 'javascript:' URL in markdown format.	CWE-79 Cross-site Scripting	CVE-2020-8294	2024-11-21 14:38	2021-02-4	Show	GitHub Exploit DB Packet Storm

197687	8.8	HIGH Adjacent	adt	lifeshield_diy_hd_video_doorbell_firmware	Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to e…	CWE-77 Command Injection	CVE-2020-8101	2024-11-21 14:38	2021-02-2	Show	GitHub Exploit DB Packet Storm

197688	7.5	HIGH Network	nextcloud	nextcloud_server	A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8295	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

197689	6.5	MEDIUM Network	nextcloud	nextcloud_server	A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage wi…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8293	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

197690	5.4	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.	CWE-79 Cross-site Scripting	CVE-2020-8292	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed