Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
248981 7.5 危険 Web-Empowered Church Team - TYPO3 の WEC Discussion Forum (wec_discussion) 拡張機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1722 2012-03-27 18:43 2011-04-7 Show GitHub Exploit DB Packet Storm
248982 4.3 警告 obspm - WebJaxe の php/partie_administrateur/administration.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1721 2012-03-27 18:43 2011-04-19 Show GitHub Exploit DB Packet Storm
248983 9.3 危険 CA Technologies - CA Output Management Web Viewer の Web Viewer ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-1719 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
248984 4.3 警告 CA Technologies - CA SiteMinder の Web Agents コンポーネントにおけるなりすまし攻撃の脆弱性 CWE-20
不適切な入力確認
CVE-2011-1718 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
248985 4.3 警告 Xymon - Xymon の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1716 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
248986 5 警告 qooxdoo
eyeOS Project
- eyeOS などの製品で使用される QooxDoo におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1715 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
248987 4.3 警告 qooxdoo
eyeOS Project
- eyeOS などの製品で使用される QooxDoo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1714 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
248988 4.3 警告 マイクロソフト - Windows 7 の Internet Explorer 8 で使用される Microsoft msxml.dll におけるヒープメモリアドレスに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1713 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
248989 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の txXPathNodeUtils::getXSLTId 関数におけるヒープメモリのアドレスに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1712 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
248990 5.5 警告 Novell - Synchronizer の Mobility Pack における他のユーザのアカウントにアクセスする脆弱性 CWE-noinfo
情報不足
CVE-2011-1711 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198591 6.1 MEDIUM
Network
siemens spectrum_power_5 A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a … CWE-79
Cross-site Scripting
CVE-2020-7579 2024-11-21 14:37 2020-03-11 Show GitHub Exploit DB Packet Storm
198592 7.5 HIGH
Network
jetbrains scala In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-7907 2024-11-21 14:37 2020-02-22 Show GitHub Exploit DB Packet Storm
198593 9.8 CRITICAL
Network
synacor zimbra_collaboration_suite Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-7796 2024-11-21 14:37 2020-02-19 Show GitHub Exploit DB Packet Storm
198594 9.8 CRITICAL
Network
freebsd freebsd In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in … CWE-787
 Out-of-bounds Write
CVE-2020-7450 2024-11-21 14:37 2020-02-19 Show GitHub Exploit DB Packet Storm
198595 8.8 HIGH
Network
codecov codecov codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argument is executed by the exec function within lib/codecov.js.… CWE-78
OS Command 
CVE-2020-7597 2024-11-21 14:37 2020-02-18 Show GitHub Exploit DB Packet Storm
198596 9.8 CRITICAL
Network
djangoproject django Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data … CWE-89
SQL Injection
CVE-2020-7471 2024-11-21 14:37 2020-02-3 Show GitHub Exploit DB Packet Storm
198597 6.1 MEDIUM
Network
jetbrains youtrack JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description. CWE-79
Cross-site Scripting
CVE-2020-7913 2024-11-21 14:37 2020-01-31 Show GitHub Exploit DB Packet Storm
198598 5.3 MEDIUM
Network
jetbrains youtrack In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups. CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-7912 2024-11-21 14:37 2020-01-31 Show GitHub Exploit DB Packet Storm
198599 6.1 MEDIUM
Network
jetbrains teamcity In JetBrains TeamCity before 2019.2, several user-level pages were vulnerable to XSS. CWE-79
Cross-site Scripting
CVE-2020-7911 2024-11-21 14:37 2020-01-31 Show GitHub Exploit DB Packet Storm
198600 5.4 MEDIUM
Network
jetbrains teamcity JetBrains TeamCity before 2019.2 was vulnerable to a stored XSS attack by a user with the developer role. CWE-79
Cross-site Scripting
CVE-2020-7910 2024-11-21 14:37 2020-01-31 Show GitHub Exploit DB Packet Storm