Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248771	7.5	危険	Google	-	Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3099	2012-05-17 14:55	2012-05-15	Show	GitHub Exploit DB Packet Storm

248772	7.5	危険	Google	-	Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3097	2012-05-17 14:44	2012-05-15	Show	GitHub Exploit DB Packet Storm

248773	7.5	危険	Google	-	Linux 上で稼働する Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3096	2012-05-17 14:21	2012-05-15	Show	GitHub Exploit DB Packet Storm

248774	7.5	危険	Google	-	Google Chrome の Ogg コンテナにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3095	2012-05-17 14:19	2012-05-15	Show	GitHub Exploit DB Packet Storm

248775	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3094	2012-05-17 14:18	2012-05-15	Show	GitHub Exploit DB Packet Storm

248776	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3093	2012-05-17 14:17	2012-05-15	Show	GitHub Exploit DB Packet Storm

248777	7.5	危険	Google	-	Google Chrome で使用される Google V8 の regex の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-3092	2012-05-17 14:16	2012-05-15	Show	GitHub Exploit DB Packet Storm

248778	7.5	危険	Google	-	Google Chrome の IndexedDB の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3091	2012-05-17 14:15	2012-05-15	Show	GitHub Exploit DB Packet Storm

248779	5	警告	Google	-	Google Chrom におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-119 バッファエラー	CVE-2011-3088	2012-05-17 14:12	2012-05-15	Show	GitHub Exploit DB Packet Storm

248780	10	危険	Google	-	Google Chrome における詳細不明な脆弱性	CWE-DesignError	CVE-2011-3087	2012-05-17 14:06	2012-05-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198791	7.5	HIGH Network	cncf redhat debian	envoy openshift_service_mesh debian_linux	CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with many small (i.e. 1 byte) chunks.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8659	2024-11-21 14:39	2020-03-5	Show	GitHub Exploit DB Packet Storm

198792	9.8	CRITICAL Network	zyxel	nas326_firmware nas520_firmware nas540_firmware nas542_firmware atp100_firmware atp200_firmware atp500_firmware atp800_firmware usg20-vpn_firmware usg20w-vpn_firmware us…	Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to…	CWE-78 OS Command	CVE-2020-9054	2024-11-21 14:39	2020-03-5	Show	GitHub Exploit DB Packet Storm

198793	5.4	MEDIUM Network	alfresco	alfresco	Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.	CWE-79 Cross-site Scripting	CVE-2020-8778	2024-11-21 14:39	2020-03-3	Show	GitHub Exploit DB Packet Storm

198794	5.4	MEDIUM Network	alfresco	alfresco	Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.	CWE-79 Cross-site Scripting	CVE-2020-8777	2024-11-21 14:39	2020-03-3	Show	GitHub Exploit DB Packet Storm

198795	5.4	MEDIUM Network	alfresco	alfresco	Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.	CWE-79 Cross-site Scripting	CVE-2020-8776	2024-11-21 14:39	2020-03-3	Show	GitHub Exploit DB Packet Storm

198796	6.1	MEDIUM Network	fiserv	accurate_reconciliation	Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter.	CWE-79 Cross-site Scripting	CVE-2020-8952	2024-11-21 14:39	2020-02-27	Show	GitHub Exploit DB Packet Storm

198797	5.4	MEDIUM Network	fiserv	accurate_reconciliation	Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager (Configuration Parameter Translation) page.	CWE-79 Cross-site Scripting	CVE-2020-8951	2024-11-21 14:39	2020-02-27	Show	GitHub Exploit DB Packet Storm

198798	8.1	HIGH Network	gurux	device_language_message_specification_director	An issue was discovered in Gurux GXDLMS Director through 8.5.1905.1301. When downloading OBIS codes, it does not verify that the downloaded files are actual OBIS codes and doesn't check for path trav…	CWE-22 Path Traversal	CVE-2020-8810	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

198799	8.1	HIGH Network	gurux	device_language_message_specification_director	Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updates to add-ins and OBIS code over an unencrypted HTTP connection. A man-in-the-middle attacker can prompt the user to download updates by mo…	CWE-494 Download of Code Without Integrity Check	CVE-2020-8809	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

198800	6.1	MEDIUM Network	wpjobboard	wpjobboard	The WPJobBoard plugin 5.5.3 for WordPress allows Persistent XSS via the Add Job form, as demonstrated by title and Description.	CWE-79 Cross-site Scripting	CVE-2020-9019	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed