Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225441	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0866	2013-03-26 15:12	2011-06-10	Show	GitHub Exploit DB Packet Storm

225442	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0864	2013-03-26 15:10	2011-06-7	Show	GitHub Exploit DB Packet Storm

225443	10	危険	サン・マイクロシステムズヒューレット・パッカード	-	Windows 上で稼働する複数の Oracle Java SE の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0817	2013-03-26 15:06	2011-06-7	Show	GitHub Exploit DB Packet Storm

225444	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start におけるポリシーファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0788	2013-03-26 15:04	2011-06-10	Show	GitHub Exploit DB Packet Storm

225445	6.9	警告	Linux	-	Linux Kernel の net/sctp/socket.c における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1828	2013-03-26 15:04	2013-03-20	Show	GitHub Exploit DB Packet Storm

225446	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における設定ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0786	2013-03-26 14:44	2011-06-10	Show	GitHub Exploit DB Packet Storm

225447	2.6	注意	株式会社ピーエムナイン	-	OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2300	2013-03-26 12:02	2013-03-26	Show	GitHub Exploit DB Packet Storm

225448	2.6	注意	COB's Products	-	COBIME におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0720	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

225449	2.6	注意	codedesign.jp	-	ArtIME 日本語入力におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0719	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

225450	2.6	注意	Baidu, Inc.	-	Simeji におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0718	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197861	4.9	MEDIUM Network	lenovo	xclarity_orchestrator	An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, for the Syslog and SMTP forwarders are written to an internal LXCO log file in cl…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-8356	2024-11-21 14:38	2021-03-10	Show	GitHub Exploit DB Packet Storm

197862	9.8	CRITICAL Network	fs-path_project	fs-path	fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, and `removeSync` methods.	CWE-77 Command Injection	CVE-2020-8298	2024-11-21 14:38	2021-03-5	Show	GitHub Exploit DB Packet Storm

197863	6.7	MEDIUM Local	nextcloud fedoraproject	nextcloud_server fedora	Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.	CWE-521 Weak Password Requirements	CVE-2020-8296	2024-11-21 14:38	2021-03-4	Show	GitHub Exploit DB Packet Storm

197864	6.5	MEDIUM Network	mongodb	mongodb	A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This issue affects MongoDB Server v3.6 versions prior to 3.6.21…	NVD-CWE-Other	CVE-2020-7929	2024-11-21 14:38	2021-03-2	Show	GitHub Exploit DB Packet Storm

197865	7.0	HIGH Local	opensuse	cyrus-sasl	A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4…	-	CVE-2020-8032	2024-11-21 14:38	2021-02-25	Show	GitHub Exploit DB Packet Storm

197866	4.3	MEDIUM Network	nextcloud	deck	Nextcloud Deck before 1.0.2 suffers from an insecure direct object reference (IDOR) vulnerability that permits users with a duplicate user identifier to access deck data of a previous deleted user.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8297	2024-11-21 14:38	2021-02-24	Show	GitHub Exploit DB Packet Storm

197867	4.4	MEDIUM Local	suse	caas_platform	A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitr…	-	CVE-2020-8030	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197868	4.0	MEDIUM Local	suse	caas_platform	A Incorrect Permission Assignment for Critical Resource vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to gain access to the kublet key. This issue affects: SUSE CaaS Platfor…	-	CVE-2020-8029	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197869	5.4	MEDIUM Network	opensuse	open_build_service	A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Open Build Service allows remote attackers to store JS code in markdown that is not properly es…	-	CVE-2020-8031	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

197870	6.6	MEDIUM Local	opensuse	openldap2	A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to…	-	CVE-2020-8027	2024-11-21 14:38	2021-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed