Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248981 7.5 危険 Web-Empowered Church Team - TYPO3 の WEC Discussion Forum (wec_discussion) 拡張機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1722 2012-03-27 18:43 2011-04-7 Show GitHub Exploit DB Packet Storm
248982 4.3 警告 obspm - WebJaxe の php/partie_administrateur/administration.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1721 2012-03-27 18:43 2011-04-19 Show GitHub Exploit DB Packet Storm
248983 9.3 危険 CA Technologies - CA Output Management Web Viewer の Web Viewer ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1719 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
248984 4.3 警告 CA Technologies - CA SiteMinder の Web Agents コンポーネントにおけるなりすまし攻撃の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1718 2012-03-27 18:43 2011-04-20 Show GitHub Exploit DB Packet Storm
248985 4.3 警告 Xymon - Xymon の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1716 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
248986 5 警告 qooxdoo
eyeOS Project		 - eyeOS などの製品で使用される QooxDoo におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1715 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
248987 4.3 警告 qooxdoo
eyeOS Project		 - eyeOS などの製品で使用される QooxDoo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1714 2012-03-27 18:43 2011-04-18 Show GitHub Exploit DB Packet Storm
248988 4.3 警告 マイクロソフト - Windows 7 の Internet Explorer 8 で使用される Microsoft msxml.dll におけるヒープメモリアドレスに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1713 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
248989 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkeｙ の txXPathNodeUtils::getXSLTId 関数におけるヒープメモリのアドレスに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1712 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
248990 5.5 警告 Novell - Synchronizer の Mobility Pack における他のユーザのアカウントにアクセスする脆弱性 CWE-noinfo
情報不足 		CVE-2011-1711 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199161 7.8 HIGH
Local 		mariadb mariadb mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack … CWE-59
Link Following 		CVE-2020-7221 2024-11-21 14:36 2020-02-5 Show GitHub Exploit DB Packet Storm
199162 7.5 HIGH
Network 		hashicorp consul HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-7219 2024-11-21 14:36 2020-01-31 Show GitHub Exploit DB Packet Storm
199163 7.5 HIGH
Network 		hashicorp nomad HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-7218 2024-11-21 14:36 2020-01-31 Show GitHub Exploit DB Packet Storm
199164 9.8 CRITICAL
Network 		openbsd
debian
fedoraproject
canonical 		opensmtpd
debian_linux
fedora
ubuntu_linux 		smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated … CWE-78
CWE-755
OS Command 
 Improper Handling of Exceptional Conditions 		CVE-2020-7247 2024-11-21 14:36 2020-01-30 Show GitHub Exploit DB Packet Storm
199165 7.5 HIGH
Network 		netty
fedoraproject
debian
redhat 		netty
fedora
debian_linux
jboss_enterprise_application_platform
jboss_enterprise_application_platform_text-only_advisories
openshift_application_runtimes_text-only_advisories 		Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exi… CWE-444
HTTP Request Smuggling 		CVE-2020-7238 2024-11-21 14:36 2020-01-28 Show GitHub Exploit DB Packet Storm
199166 6.5 MEDIUM
Network 		codesys control_for_beaglebone
control_for_empc-a\/imx6
control_for_iot2000
control_for_linux
control_for_plcnext
control_for_pfc100
control_for_pfc200
control_for_raspberry_pi
contro… 		CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-7052 2024-11-21 14:36 2020-01-25 Show GitHub Exploit DB Packet Storm
199167 10.0 CRITICAL
Network 		gehealthcare apexpro_telemetry_server_firmware
carescape_central_station_mai700_firmware
carescape_central_station_mas700_firmware
clinical_information_center_mp100d_firmware
clinical_information_cent… 		In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the… CWE-326
Inadequate Encryption Strength 		CVE-2020-6966 2024-11-21 14:36 2020-01-25 Show GitHub Exploit DB Packet Storm
199168 9.9 CRITICAL
Network 		gehealthcare apexpro_telemetry_server_firmware
carescape_b450_monitor_firmware
carescape_b650_monitor_firmware
carescape_b850_monitor_firmware
carescape_central_station_mai700_firmware
carescape_ce… 		In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B45… CWE-20
CWE-434
 Improper Input Validation 
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-6965 2024-11-21 14:36 2020-01-25 Show GitHub Exploit DB Packet Storm
199169 8.6 HIGH
Network 		gehealthcare apexpro_telemetry_server_firmware
carescape_central_station_mai700_firmware
carescape_central_station_mas700_firmware
clinical_information_center_mp100d_firmware
clinical_information_cent… 		In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and … CWE-306
Missing Authentication for Critical Function 		CVE-2020-6964 2024-11-21 14:36 2020-01-25 Show GitHub Exploit DB Packet Storm
199170 10.0 CRITICAL
Network 		gehealthcare apexpro_telemetry_server_firmware
carescape_central_station_mai700_firmware
carescape_central_station_mas700_firmware
clinical_information_center_mp100d_firmware
clinical_information_cent… 		In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the… CWE-20
CWE-798
 Improper Input Validation 
 Use of Hard-coded Credentials 		CVE-2020-6963 2024-11-21 14:36 2020-01-25 Show GitHub Exploit DB Packet Storm