Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248951 5 警告 Ruby-lang.org - Ruby における乱数の値を推測される脆弱性 CWE-310
暗号の問題
CVE-2011-2686 2012-03-27 18:43 2011-08-5 Show GitHub Exploit DB Packet Storm
248952 9.3 危険 The Document Foundation - LibreOffice の Lotus Word Pro インポートフィルタにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2685 2012-03-27 18:43 2011-07-21 Show GitHub Exploit DB Packet Storm
248953 4 警告 IBM - IBM Rational DOORS Web Access の Login コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-2682 2012-03-27 18:43 2011-05-5 Show GitHub Exploit DB Packet Storm
248954 10 危険 IBM - IBM Rational DOORS Web Access における詳細不明な脆弱性 CWE-20
不適切な入力確認
CVE-2011-2681 2012-03-27 18:43 2011-07-7 Show GitHub Exploit DB Packet Storm
248955 10 危険 IBM - IBM Rational DOORS Web Access における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2011-2680 2012-03-27 18:43 2011-07-7 Show GitHub Exploit DB Packet Storm
248956 4.3 警告 IBM - IBM Rational DOORS Web Access におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2679 2012-03-27 18:43 2011-07-7 Show GitHub Exploit DB Packet Storm
248957 10 危険 CA Technologies - CA Gateway Security および CA Total Defense で使用されている CA Gateway Security for HTTP の Icihttp.exe における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2667 2012-03-27 18:43 2011-07-20 Show GitHub Exploit DB Packet Storm
248958 5 警告 Digium - Asterisk Open Source の SIP チャンネルドライバのディフォルト設定におけるアカウント名を列挙される脆弱性 CWE-16
環境設定
CVE-2011-2666 2012-03-27 18:43 2011-06-28 Show GitHub Exploit DB Packet Storm
248959 5 警告 Digium - Asterisk Open Source の reqresp_parser.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-2665 2012-03-27 18:43 2011-06-23 Show GitHub Exploit DB Packet Storm
248960 3.6 注意 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point Multi-Domain Management / Provider-1 NGX における任意のファイルを上書きされる脆弱性 CWE-noinfo
情報不足
CVE-2011-2664 2012-03-27 18:43 2011-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198621 6.7 MEDIUM
Local
siemens simatic_pcs_neo
opcenter_execution_discrete
opcenter_execution_foundation
opcenter_execution_process
opcenter_intelligence
opcenter_quality
opcenter_rd\&l
simatic_step_7
s…
A vulnerability has been identified in Opcenter Execution Discrete (All versions < V3.2), Opcenter Execution Foundation (All versions < V3.2), Opcenter Execution Process (All versions < V3.2), Opcent… - CVE-2020-7581 2024-11-21 14:37 2020-07-14 Show GitHub Exploit DB Packet Storm
198622 5.4 MEDIUM
Network
siemens opcenter_execution_core A vulnerability has been identified in Camstar Enterprise Platform (All versions), Opcenter Execution Core (All versions < V8.2), Opcenter Execution Core (V8.2). An authenticated user with the abilit… CWE-79
Cross-site Scripting
CVE-2020-7576 2024-11-21 14:37 2020-07-14 Show GitHub Exploit DB Packet Storm
198623 9.8 CRITICAL
Network
tobesoft xplatform XPLATFORM v9.2.260 and eariler versions contain a vulnerability that could allow remote files to be downloaded by setting the arguments to the vulnerable method. this can be leveraged for code execut… NVD-CWE-noinfo
CVE-2020-7815 2024-11-21 14:37 2020-07-10 Show GitHub Exploit DB Packet Storm
198624 9.8 CRITICAL
Network
raonwiz raon_k_upload RAONWIZ v2018.0.2.50 and eariler versions contains a vulnerability that could allow remote files to be downloaded and excuted by lack of validation to file extension, witch can used as remote-code-ex… CWE-20
 Improper Input Validation 
CVE-2020-7814 2024-11-21 14:37 2020-07-10 Show GitHub Exploit DB Packet Storm
198625 5.3 MEDIUM
Network
sockjs_project sockjs Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-7693 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
198626 9.1 CRITICAL
Network
google oauth_client_library_for_java PKCE support is not implemented in accordance with the RFC for OAuth 2.0 for Native Apps. Without the use of PKCE, the authorization code returned by an authorization server is not enough to guarante… CWE-863
 Incorrect Authorization
CVE-2020-7692 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
198627 9.8 CRITICAL
Network
freebsd freebsd In FreeBSD 12.1-STABLE before r362281, 11.4-STABLE before r362281, and 11.4-RELEASE before p1, long values in the user-controlled PATH environment variable cause posix_spawnp to write beyond the end … CWE-787
 Out-of-bounds Write
CVE-2020-7458 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
198628 8.1 HIGH
Network
freebsd freebsd In FreeBSD 12.1-STABLE before r359565, 12.1-RELEASE before p7, 11.4-STABLE before r362975, 11.4-RELEASE before p1, and 11.3-RELEASE before p11, missing synchronization in the IPV6_2292PKTOPTIONS sock… CWE-362
CWE-416
CWE-662
Race Condition
 Use After Free
 Improper Synchronization
CVE-2020-7457 2024-11-21 14:37 2020-07-9 Show GitHub Exploit DB Packet Storm
198629 6.1 MEDIUM
Network
parall jspdf In all versions of the package jspdf, it is possible to use <<script>script> in order to go over the filtering regex. CWE-79
Cross-site Scripting
CVE-2020-7691 2024-11-21 14:37 2020-07-6 Show GitHub Exploit DB Packet Storm
198630 6.1 MEDIUM
Network
parall jspdf All affected versions <2.0.0 of package jspdf are vulnerable to Cross-site Scripting (XSS). It is possible to inject JavaScript code via the html method. CWE-79
Cross-site Scripting
CVE-2020-7690 2024-11-21 14:37 2020-07-6 Show GitHub Exploit DB Packet Storm