Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248971 5 警告 Hycus CMS project - Hycus CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3745 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248972 5 警告 htmlpurifier - HTML Purifier における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3744 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248973 5 警告 Hesk.com - Hesk における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3743 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248974 5 警告 helpcenterlive - HelpCenter Live における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3742 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248975 5 警告 Ganglia - Ganglia における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3741 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248976 5 警告 FrontAccounting - FrontAccounting における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3740 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248977 5 警告 openfreeway - Freeway における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3739 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248978 5 警告 Feng Office - Feng Office における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3738 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248979 5 警告 eyeOS Project - eyeOS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3737 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
248980 5 警告 exoscripts - ExoPHPDesk における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3736 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211581 7.5 HIGH
Network
hcltechsw hcl_commerce Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors. NVD-CWE-noinfo
CVE-2020-14274 2024-11-21 14:02 2021-01-13 Show GitHub Exploit DB Packet Storm
211582 6.5 MEDIUM
Network
apache dolphinscheduler Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface. CWE-276
Incorrect Default Permissions 
CVE-2020-13922 2024-11-21 14:02 2021-01-11 Show GitHub Exploit DB Packet Storm
211583 7.5 HIGH
Network
hcltech domino HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to c… CWE-20
 Improper Input Validation 
CVE-2020-14273 2024-11-21 14:02 2020-12-29 Show GitHub Exploit DB Packet Storm
211584 6.1 MEDIUM
Network
crk business_platform CRK Business Platform <= 2019.1 allows reflected XSS via erro.aspx on 'CRK', 'IDContratante', 'Erro', or 'Mod' parameter. This is path-independent. CWE-79
Cross-site Scripting
CVE-2020-13969 2024-11-21 14:02 2020-12-24 Show GitHub Exploit DB Packet Storm
211585 9.8 CRITICAL
Network
crk business_platform CRK Business Platform <= 2019.1 allows can inject SQL statements against the DB on any path using the 'strSessao' parameter. CWE-89
SQL Injection
CVE-2020-13968 2024-11-21 14:02 2020-12-24 Show GitHub Exploit DB Packet Storm
211586 5.3 MEDIUM
Network
hcltech domino HCL Domino v9, v10, v11 is susceptible to an Information Disclosure vulnerability in XPages due to improper error handling of user input. An unauthenticated attacker could exploit this vulnerability … CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-14270 2024-11-21 14:02 2020-12-23 Show GitHub Exploit DB Packet Storm
211587 8.8 HIGH
Network
hcltechsw hcl_client_application_access A vulnerability in the input parameter handling of HCL Client Application Access v9 could potentially be exploited by an authenticated attacker resulting in a stack buffer overflow. This could allow … CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write
CVE-2020-14231 2024-11-21 14:02 2020-12-23 Show GitHub Exploit DB Packet Storm
211588 6.5 MEDIUM
Network
hcltechsw
hcltech
hcl_inotes HCL iNotes is susceptible to a Tabnabbing vulnerability caused by improper sanitization of message content. A remote unauthenticated attacker could use this vulnerability to trick the end user into e… NVD-CWE-Other
CVE-2020-14225 2024-11-21 14:02 2020-12-22 Show GitHub Exploit DB Packet Storm
211589 6.1 MEDIUM
Network
hcltech hcl_inotes HCL iNotes v9, v10 and v11 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability due to improper handling of message content. An unauthenticated remote attacker could exploit this vulne… CWE-79
Cross-site Scripting
CVE-2020-14271 2024-11-21 14:02 2020-12-19 Show GitHub Exploit DB Packet Storm
211590 9.8 CRITICAL
Network
hcltech notes A vulnerability in the MIME message handling of the HCL Notes v9 client could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote a… CWE-787
 Out-of-bounds Write
CVE-2020-14224 2024-11-21 14:02 2020-12-19 Show GitHub Exploit DB Packet Storm