Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249051 7.5 危険 ICloudCenter - ICloudCenter ICJobSite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1557 2012-03-27 18:43 2011-04-4 Show GitHub Exploit DB Packet Storm
249052 6.8 警告 Andy's PHP Knowledgebase Project - Aphpkb の plugins/pdfClasses/pdfgen.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1556 2012-03-27 18:43 2011-04-4 Show GitHub Exploit DB Packet Storm
249053 6.8 警告 Andy's PHP Knowledgebase Project - Aphpkb のsa.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1555 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
249054 4.3 警告 foolabs
T1lib		 - Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-1554 2012-03-27 18:43 2011-03-31 Show GitHub Exploit DB Packet Storm
249055 4.3 警告 foolabs
T1lib		 - Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1553 2012-03-27 18:43 2011-03-31 Show GitHub Exploit DB Packet Storm
249056 4.3 警告 foolabs
T1lib		 - Xpdf などの製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1552 2012-03-27 18:43 2011-03-31 Show GitHub Exploit DB Packet Storm
249057 6.9 警告 Novell - SUSE openSUSE Factory における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1551 2012-03-27 18:43 2011-03-30 Show GitHub Exploit DB Packet Storm
249058 6.3 警告 Gentoo Linux - logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1550 2012-03-27 18:43 2011-03-30 Show GitHub Exploit DB Packet Storm
249059 6.3 警告 Gentoo Linux - logrotate のデフォルト設定におけるシンボリックリンク攻撃を誘発する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1549 2012-03-27 18:43 2011-03-30 Show GitHub Exploit DB Packet Storm
249060 3.5 注意 Liferay
Apache Software Foundation		 - Liferay Portal CE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1570 2012-03-27 18:43 2010-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211941 7.8 HIGH
Local 		amd radeon_pro_software
radeon_software 		An insufficient input validation in the AMD Graphics Driver for Windows 10 may allow unprivileged users to unload the driver, potentially causing memory corruptions in high privileged processes, whic… CWE-787
 Out-of-bounds Write 		CVE-2020-12981 2024-11-21 14:00 2021-06-12 Show GitHub Exploit DB Packet Storm
211942 7.8 HIGH
Local 		amd radeon_pro_software
radeon_software 		An out of bounds write and read vulnerability in the AMD Graphics Driver for Windows 10 may lead to escalation of privilege or denial of service. CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-12980 2024-11-21 14:00 2021-06-12 Show GitHub Exploit DB Packet Storm
211943 7.2 HIGH
Network 		amd epyc_7251
epyc_7261
epyc_7281
epyc_7301
epyc_7351
epyc_7351p
epyc_7371
epyc_7401
epyc_7401p
epyc_7451
epyc_7501
epyc_7551
epyc_7551p
epyc_7601
epyc_7763
e… 		The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the… CWE-77
Command Injection 		CVE-2020-12967 2024-11-21 14:00 2021-05-13 Show GitHub Exploit DB Packet Storm
211944 4.6 MEDIUM
Physics 		coolkit ewelink Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eaves… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-12702 2024-11-21 14:00 2021-02-24 Show GitHub Exploit DB Packet Storm
211945 8.8 HIGH
Network 		atlassian alfresco_enterprise_content_management An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run a… CWE-74
Injection 		CVE-2020-12873 2024-11-21 14:00 2021-02-20 Show GitHub Exploit DB Packet Storm
211946 6.5 MEDIUM
Network 		hubspot jinjava Jinjava before 2.5.4 allow access to arbitrary classes by calling Java methods on objects passed into a Jinjava context. This could allow for abuse of the application class loader, including Arbitrar… CWE-863
 Incorrect Authorization 		CVE-2020-12668 2024-11-21 14:00 2021-02-20 Show GitHub Exploit DB Packet Storm
211947 7.8 HIGH
Local 		digi connectport_x2e_firmware Digi ConnectPort X2e before 3.2.30.6 allows an attacker to escalate privileges from the python user to root via a symlink attack that uses chown, related to /etc/init.d/S50dropbear.sh and the /WEB/py… CWE-59
Link Following 		CVE-2020-12878 2024-11-21 14:00 2021-02-18 Show GitHub Exploit DB Packet Storm
211948 6.5 MEDIUM
Network 		teradici cloud_access_connector An Anti CSRF mechanism was discovered missing in the Teradici Cloud Access Connector v31 and earlier in a specific web form, which allowed an attacker with knowledge of both a machineID and user GUID… CWE-352
 Origin Validation Error 		CVE-2020-13186 2024-11-21 14:00 2021-02-12 Show GitHub Exploit DB Packet Storm
211949 6.5 MEDIUM
Network 		teradici cloud_access_connector Certain web application pages in the authenticated section of the Teradici Cloud Access Connector prior to v18 were accessible without the need to specify authentication tokens, which allowed an atta… CWE-287
Improper Authentication 		CVE-2020-13185 2024-11-21 14:00 2021-02-12 Show GitHub Exploit DB Packet Storm
211950 9.8 CRITICAL
Network 		wavlink wn575a4_firmware
wn579x3_firmware 		Wavlink WN575A4 and WN579X3 devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request. CWE-77
Command Injection 		CVE-2020-13117 2024-11-21 14:00 2021-02-10 Show GitHub Exploit DB Packet Storm