Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248771 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3093 2012-05-17 14:17 2012-05-15 Show GitHub Exploit DB Packet Storm
248772 7.5 危険 Google - Google Chrome で使用される Google V8 の regex の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3092 2012-05-17 14:16 2012-05-15 Show GitHub Exploit DB Packet Storm
248773 7.5 危険 Google - Google Chrome の IndexedDB の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-3091 2012-05-17 14:15 2012-05-15 Show GitHub Exploit DB Packet Storm
248774 5 警告 Google - Google Chrom におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3088 2012-05-17 14:12 2012-05-15 Show GitHub Exploit DB Packet Storm
248775 10 危険 Google - Google Chrome における詳細不明な脆弱性 CWE-DesignError
CVE-2011-3087 2012-05-17 14:06 2012-05-15 Show GitHub Exploit DB Packet Storm
248776 5 警告 Google - Google Chrome の自動入力機能におけるサービス運用妨害 (UI 破損) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3085 2012-05-17 13:49 2012-05-15 Show GitHub Exploit DB Packet Storm
248777 5 警告 Google - Google Chrome の browser/profiles/profile_impl_io_data.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3083 2012-05-17 13:42 2012-05-15 Show GitHub Exploit DB Packet Storm
248778 4.3 警告 Drupal - Drupal の Form API における送信先 URL を検証しない脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1589 2012-05-17 12:01 2012-05-17 Show GitHub Exploit DB Packet Storm
248779 5 警告 SAP - SAP NetWeaver の DiagTraceHex 関数におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2612 2012-05-16 15:43 2012-05-15 Show GitHub Exploit DB Packet Storm
248780 9.3 危険 SAP - SAP NetWeaver の DiagTraceR3Info 関数における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2611 2012-05-16 15:41 2012-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211181 9.8 CRITICAL
Network 		midasolutions eframework Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution. CWE-287
Improper Authentication 		CVE-2020-15921 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211182 9.8 CRITICAL
Network 		midasolutions eframework There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required. CWE-78
OS Command  		CVE-2020-15920 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211183 6.1 MEDIUM
Network 		midasolutions eframework A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting 		CVE-2020-15919 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211184 5.4 MEDIUM
Network 		midasolutions eframework Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting 		CVE-2020-15918 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211185 9.8 CRITICAL
Network 		claws-mail
fedoraproject
opensuse 		claws-mail
fedora
leap
backports_sle 		common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. NVD-CWE-noinfo
CVE-2020-15917 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211186 9.8 CRITICAL
Network 		tenda ac15_firmware goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. CWE-78
OS Command  		CVE-2020-15916 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211187 6.5 MEDIUM
Adjacent 		tesla model_3_firmware Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue NVD-CWE-noinfo
CVE-2020-15912 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
211188 8.8 HIGH
Network 		softwareupdate_project softwareupdate A SQL injection vulnerability in softwareupdate_controller.php in the Software Update module before 1.6 for MunkiReport allows attackers to execute arbitrary SQL commands via the last URL parameter o… CWE-89
SQL Injection 		CVE-2020-15887 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
211189 8.8 HIGH
Network 		reportdata_project reportdata A SQL injection vulnerability in reportdata_controller.php in the reportdata module before 3.5 for MunkiReport allows attackers to execute arbitrary SQL commands via the req parameter of the /module/… CWE-89
SQL Injection 		CVE-2020-15886 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm
211190 5.4 MEDIUM
Network 		munkireport_project comment A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment. CWE-79
Cross-site Scripting 		CVE-2020-15885 2024-11-21 14:06 2020-07-23 Show GitHub Exploit DB Packet Storm