Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248941 5.4 警告 シスコシステムズ - Cisco IOS および Cisco Unified Communications Manager におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4019 2012-05-8 11:50 2012-05-3 Show GitHub Exploit DB Packet Storm
248942 5.4 警告 シスコシステムズ - Cisco IOS の PPP の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-16
環境設定 		CVE-2011-4016 2012-05-8 11:41 2012-05-2 Show GitHub Exploit DB Packet Storm
248943 5 警告 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (インターフェイスキューウェッジ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4015 2012-05-8 11:40 2012-05-2 Show GitHub Exploit DB Packet Storm
248944 4 警告 シスコシステムズ - Cisco WCS の TAC Case Attachment ツールにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4014 2012-05-8 11:39 2012-05-2 Show GitHub Exploit DB Packet Storm
248945 9.3 危険 シスコシステムズ - Cisco IOS におけるフラグメンテーション (断片化) のエントリー生成処理に関する詳細不明な脆弱性 CWE-Other
その他 		CVE-2011-4012 2012-05-8 11:38 2012-05-2 Show GitHub Exploit DB Packet Storm
248946 5.4 警告 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4007 2012-05-8 11:38 2012-05-2 Show GitHub Exploit DB Packet Storm
248947 7.8 危険 シスコシステムズ - Cisco ASA 5500 シリーズデバイスの ESMTP 検査機能におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4006 2012-05-8 11:36 2012-05-2 Show GitHub Exploit DB Packet Storm
248948 4.3 警告 シスコシステムズ - Cisco Secure Access Control Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3317 2012-05-8 11:35 2012-05-2 Show GitHub Exploit DB Packet Storm
248949 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliances 5500 series デバイスにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3309 2012-05-8 11:34 2012-05-2 Show GitHub Exploit DB Packet Storm
248950 7.8 危険 シスコシステムズ - Cisco IOS XR の NETIO および IPV4_IO プロセスにおけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3295 2012-05-8 11:28 2012-05-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198361 5.4 MEDIUM
Network 		rocket.chat rocket.chat The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter. CWE-79
Cross-site Scripting 		CVE-2020-8288 2024-11-21 14:38 2021-01-27 Show GitHub Exploit DB Packet Storm
198362 6.5 MEDIUM
Network 		nodejs
debian
fedoraproject
oracle
siemens 		node.js
debian_linux
fedora
graalvm
sinec_infrastructure_network_services 		Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies th… CWE-444
HTTP Request Smuggling 		CVE-2020-8287 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198363 5.4 MEDIUM
Network 		nextcloud contacts A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting 		CVE-2020-8281 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198364 5.4 MEDIUM
Network 		nextcloud contacts A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting 		CVE-2020-8280 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198365 4.3 MEDIUM
Network 		citrix secure_mail Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicio… CWE-269
 Improper Privilege Management 		CVE-2020-8275 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198366 6.5 MEDIUM
Network 		citrix secure_mail Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note th… CWE-94
Code Injection 		CVE-2020-8274 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198367 6.1 MEDIUM
Network 		rubyonrails rails In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL whic… CWE-79
Cross-site Scripting 		CVE-2020-8264 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198368 8.1 HIGH
Network 		nodejs
debian
fedoraproject
oracle
siemens 		node.js
debian_linux
fedora
graalvm
sinec_infrastructure_network_services 		Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::T… CWE-416
 Use After Free 		CVE-2020-8265 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198369 6.1 MEDIUM
Network 		mendix mendixsso MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supp… CWE-79
Cross-site Scripting 		CVE-2020-8160 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
198370 7.8 HIGH
Local 		backblaze backblaze Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of cl… CWE-269
 Improper Privilege Management 		CVE-2020-8290 2024-11-21 14:38 2020-12-27 Show GitHub Exploit DB Packet Storm