Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225441	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0866	2013-03-26 15:12	2011-06-10	Show	GitHub Exploit DB Packet Storm

225442	10	危険	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware 日立レッドハット	-	Oracle Java SE の Java Runtime Environment (JRE) コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0864	2013-03-26 15:10	2011-06-7	Show	GitHub Exploit DB Packet Storm

225443	10	危険	サン・マイクロシステムズヒューレット・パッカード	-	Windows 上で稼働する複数の Oracle Java SE の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-0817	2013-03-26 15:06	2011-06-7	Show	GitHub Exploit DB Packet Storm

225444	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start におけるポリシーファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0788	2013-03-26 15:04	2011-06-10	Show	GitHub Exploit DB Packet Storm

225445	6.9	警告	Linux	-	Linux Kernel の net/sctp/socket.c における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1828	2013-03-26 15:04	2013-03-20	Show	GitHub Exploit DB Packet Storm

225446	6.8	警告	サン・マイクロシステムズヒューレット・パッカード	-	Java Web Start における設定ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0786	2013-03-26 14:44	2011-06-10	Show	GitHub Exploit DB Packet Storm

225447	2.6	注意	株式会社ピーエムナイン	-	OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2300	2013-03-26 12:02	2013-03-26	Show	GitHub Exploit DB Packet Storm

225448	2.6	注意	COB's Products	-	COBIME におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0720	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

225449	2.6	注意	codedesign.jp	-	ArtIME 日本語入力におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0719	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

225450	2.6	注意	Baidu, Inc.	-	Simeji におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0718	2013-03-26 12:01	2013-03-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198031	9.8	CRITICAL Network	norman	malware_cleaner	nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled.	CWE-787 Out-of-bounds Write	CVE-2020-8508	2024-11-21 14:38	2020-02-3	Show	GitHub Exploit DB Packet Storm

198032	6.1	MEDIUM Network	maxum	rumpus	An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functiona…	CWE-79 Cross-site Scripting	CVE-2020-8514	2024-11-21 14:38	2020-02-3	Show	GitHub Exploit DB Packet Storm

198033	5.3	MEDIUM Network	torproject	tor	The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to di…	NVD-CWE-noinfo	CVE-2020-8516	2024-11-21 14:38	2020-02-2	Show	GitHub Exploit DB Packet Storm

198034	9.8	CRITICAL Network	draytek	vigor2960_firmware vigor300b_firmware vigor3900_firmware	DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacter…	CWE-78 OS Command	CVE-2020-8515	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198035	6.1	MEDIUM Network	icewarp	icewarp_server	In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.	CWE-79 Cross-site Scripting	CVE-2020-8512	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198036	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.	CWE-352 Origin Validation Error	CVE-2020-8505	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198037	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.	CWE-352 Origin Validation Error	CVE-2020-8504	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198038	6.5	MEDIUM Network	biscom	secure_file_transfer	Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-uploa…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8503	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198039	4.3	MEDIUM Network	zohocorp	manageengine_remote_access_plus	An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined c…	NVD-CWE-noinfo	CVE-2020-8422	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198040	9.8	CRITICAL Network	simplejobscript	simplejobscript	controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-8440	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm