Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249031 4.3 警告 grapecity - GrapeCity Data Dynamics Reports の DataDynamics.Reports.Web クラスライブラリにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1660 2012-03-27 18:43 2011-04-9 Show GitHub Exploit DB Packet Storm
249032 7.5 危険 CA Technologies - CA TD の UNC Server の management.asmx モジュールにおけるデータベース資格情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-1655 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
249033 7.5 危険 CA Technologies - CA Total Defense の Management Server の Heartbeat Web Service におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1654 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
249034 10 危険 CA Technologies - CA TD の UNC Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1653 2012-03-27 18:43 2011-04-13 Show GitHub Exploit DB Packet Storm
249035 9 危険 Digium - Asterisk Open Source の Manager Interface における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1599 2012-03-27 18:43 2011-04-21 Show GitHub Exploit DB Packet Storm
249036 4.3 警告 Wireshark - Wireshark の NFS 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-1592 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
249037 9.3 危険 Wireshark - Wireshark の DECT 解析部におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1591 2012-03-27 18:43 2011-04-15 Show GitHub Exploit DB Packet Storm
249038 4.3 警告 Wireshark - Wireshark の X.509if 解析部におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1590 2012-03-27 18:43 2011-04-14 Show GitHub Exploit DB Packet Storm
249039 5 警告 mojolicious - Mojolicious の Path.pm におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1589 2012-03-27 18:43 2011-04-29 Show GitHub Exploit DB Packet Storm
249040 4.3 警告 マイクロソフト
MediaWiki		 - MediaWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1587 2012-03-27 18:43 2011-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198641 9.8 CRITICAL
Network 		hp intelligent_management_center A faultdevparasset expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2020-7143 2024-11-21 14:36 2020-10-20 Show GitHub Exploit DB Packet Storm
198642 9.8 CRITICAL
Network 		hp intelligent_management_center A eventinfo_content expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2020-7142 2024-11-21 14:36 2020-10-20 Show GitHub Exploit DB Packet Storm
198643 9.8 CRITICAL
Network 		hp intelligent_management_center A adddevicetoview expression language injection remote code execution vulnerability was discovered in HPE Intelligent Management Center (iMC) version(s): Prior to iMC PLAT 7.3 (E0705P07). CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') 		CVE-2020-7141 2024-11-21 14:36 2020-10-20 Show GitHub Exploit DB Packet Storm
198644 5.5 MEDIUM
Local 		blackberry unified_endpoint_manager An improper input validation vulnerability in the UEM Core of BlackBerry UEM version(s) 12.13.0, 12.12.1a QF2 (and earlier), and 12.11.1 QF3 (and earlier) could allow an attacker to potentially cause… CWE-20
 Improper Input Validation  		CVE-2020-6933 2024-11-21 14:36 2020-10-14 Show GitHub Exploit DB Packet Storm
198645 9.8 CRITICAL
Network 		zte zxone_19700_snpe_firmware A ZTE product is impacted by the improper access control vulnerability. Due to lack of an authentication protection mechanism in the program, attackers could use this vulnerability to gain access rig… CWE-306
Missing Authentication for Critical Function 		CVE-2020-6875 2024-11-21 14:36 2020-10-6 Show GitHub Exploit DB Packet Storm
198646 5.3 MEDIUM
Network 		php
fedoraproject
debian
opensuse
canonical
netapp
tenable 		php
fedora
debian_linux
leap
ubuntu_linux
clustered_data_ontap
tenable.sc 		In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when PHP is processing incoming HTTP cookie values, the cookie names are url-decoded. This may lead to cookies with pref… CWE-565
 Reliance on Cookies without Validation and Integrity Checking 		CVE-2020-7070 2024-11-21 14:36 2020-10-3 Show GitHub Exploit DB Packet Storm
198647 6.5 MEDIUM
Network 		php
fedoraproject
debian
opensuse
canonical
netapp
oracle
tenable 		php
fedora
debian_linux
leap
ubuntu_linux
clustered_data_ontap
communications_diameter_signaling_router
tenable.sc 		In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually use… CWE-326
Inadequate Encryption Strength 		CVE-2020-7069 2024-11-21 14:36 2020-10-3 Show GitHub Exploit DB Packet Storm
198648 7.8 HIGH
Local 		eaton 9000x_programming_and_configuration_software A DLL Hijacking vulnerability in Eaton's 9000x Programming and Configuration Software v 2.0.38 and prior allows an attacker to execute arbitrary code by replacing the required DLLs with malicious DLL… CWE-427
CWE-426
 Uncontrolled Search Path Element
 Untrusted Search Path 		CVE-2020-6654 2024-11-21 14:36 2020-10-1 Show GitHub Exploit DB Packet Storm
198649 7.5 HIGH
Network 		arubanetworks cx_6200f_firmware
cx_6300_firmware
cx_6400_firmware
cx_8320_firmware
cx_8325_firmware
cx_8400_firmware 		Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local D… CWE-787
 Out-of-bounds Write 		CVE-2020-7122 2024-11-21 14:36 2020-09-23 Show GitHub Exploit DB Packet Storm
198650 7.5 HIGH
Network 		arubanetworks cx_6200f_firmware
cx_6300_firmware
cx_6400_firmware
cx_8320_firmware
cx_8325_firmware
cx_8400_firmware 		Two memory corruption vulnerabilities in the Aruba CX Switches Series 6200F, 6300, 6400, 8320, 8325, and 8400 have been found. Successful exploitation of these vulnerabilities could result in Local D… CWE-787
 Out-of-bounds Write 		CVE-2020-7121 2024-11-21 14:36 2020-09-23 Show GitHub Exploit DB Packet Storm