Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249051	5	警告	WordPress.org	-	WordPress における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3128	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249052	5.8	警告	WordPress.org	-	WordPress におけるクリックジャックの脆弱性	CWE-20 不適切な入力確認	CVE-2011-3127	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249053	5	警告	WordPress.org	-	WordPress におけるユーザ名を特定される脆弱性	CWE-200 情報漏えい	CVE-2011-3126	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249054	10	危険	WordPress.org	-	WordPress における脆弱性	CWE-noinfo 情報不足	CVE-2011-3125	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249055	7.2	危険	IBM	-	IBM InfoSphere DataStage および他の製品で使用される IBM InfoSphere Information Server における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3124	2012-03-27 18:43	2011-08-10	Show	GitHub Exploit DB Packet Storm

249056	7.2	危険	IBM	-	IBM InfoSphere DataStage および他の製品で使用される IBM InfoSphere Information Server における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3123	2012-03-27 18:43	2011-08-10	Show	GitHub Exploit DB Packet Storm

249057	10	危険	WordPress.org	-	WordPress における脆弱性	CWE-noinfo 情報不足	CVE-2011-3122	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249058	5	警告	Novell	-	Novell Data Synchronizer の WebAdmin における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3014	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249059	5	警告	Novell	-	Novell Data Synchronizer の WebAdmin におけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-3013	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249060	10	危険	ioquake3 worldofpadman urbanterror tremulous	-	World of Padman などの製品で使用される ioQuake3 エンジンにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3012	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197851	8.0	HIGH Adjacent	huawei	smartax_ma5600t_firmware smartax_ma5800_firmware smartax_ea5800_firmware	There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product…	CWE-120 Classic Buffer Overflow	CVE-2020-9067	2024-11-21 14:39	2020-04-3	Show	GitHub Exploit DB Packet Storm

197852	7.8	HIGH Local	linux fedoraproject canonical netapp	linux_kernel fedora ubuntu_linux cloud_backup steelstore_cloud_integrated_storage solidfire hci_management_node a700s_firmware 8300_firmware 8700_firmware a400_firmware<…	In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel …	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2020-8835	2024-11-21 14:39	2020-04-3	Show	GitHub Exploit DB Packet Storm

197853	6.1	MEDIUM Network	tiki	tikiwiki_cms\/groupware	There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows maliciou…	CWE-79 Cross-site Scripting	CVE-2020-8966	2024-11-21 14:39	2020-04-2	Show	GitHub Exploit DB Packet Storm

197854	5.4	MEDIUM Network	versiant	lynx_customer_service_portal	Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stor…	CWE-79 Cross-site Scripting	CVE-2020-9055	2024-11-21 14:39	2020-03-31	Show	GitHub Exploit DB Packet Storm

197855	4.3	MEDIUM Network	kubernetes fedoraproject	kubernetes fedora	The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8552	2024-11-21 14:39	2020-03-28	Show	GitHub Exploit DB Packet Storm

197856	6.5	MEDIUM Adjacent	kubernetes fedoraproject	kubernetes fedora	The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8551	2024-11-21 14:39	2020-03-28	Show	GitHub Exploit DB Packet Storm

197857	7.8	HIGH Local	huawei	oxfordp-an10b_firmware	Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user perf…	CWE-287 Improper Authentication	CVE-2020-9066	2024-11-21 14:39	2020-03-27	Show	GitHub Exploit DB Packet Storm

197858	5.5	MEDIUM Local	huawei	taurus-al00b_firmware	Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to explo…	CWE-416 Use After Free	CVE-2020-9065	2024-11-21 14:39	2020-03-27	Show	GitHub Exploit DB Packet Storm

197859	6.5	MEDIUM Network	google	closure_library	A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authori…	NVD-CWE-noinfo	CVE-2020-8910	2024-11-21 14:39	2020-03-26	Show	GitHub Exploit DB Packet Storm

197860	6.1	MEDIUM Network	dart	dart_software_development_kit	An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the sanitization and inject c…	CWE-79 Cross-site Scripting	CVE-2020-8923	2024-11-21 14:39	2020-03-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed