Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249061	5	警告	Novell	-	Novell Data Synchronizer の WebAdmin におけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-3013	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249062	10	危険	ioquake3 worldofpadman urbanterror tremulous	-	World of Padman などの製品で使用される ioQuake3 エンジンにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3012	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249063	5	警告	Ruby-lang.org	-	Ruby における乱数の値を推測される脆弱性	CWE-310 暗号の問題	CVE-2011-3009	2012-03-27 18:43	2011-08-5	Show	GitHub Exploit DB Packet Storm

249064	6.8	警告	マカフィー	-	McAfee SaaS Endpoint Protection の myCIOScn.dll における任意のファイルを書かれる脆弱性	CWE-94 コード・インジェクション	CVE-2011-3007	2012-03-27 18:43	2011-08-10	Show	GitHub Exploit DB Packet Storm

249065	6.8	警告	マカフィー	-	McAfee の SaaS Endpoint Protection における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3006	2012-03-27 18:43	2011-08-10	Show	GitHub Exploit DB Packet Storm

249066	5	警告	Mozilla Foundation	-	Bugzilla におけるプライベートグループ名の存在を発見される脆弱性	CWE-DesignError	CVE-2011-2979	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249067	5	警告	Mozilla Foundation	-	Bugzilla における任意のアドレスを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2978	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249068	2.1	注意	Mozilla Foundation	-	Bugzilla における重要な情報を取得される脆弱性	CWE-DesignError	CVE-2011-2977	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249069	4.3	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2976	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249070	6.8	警告	UMN	-	MapServer の msAddImageSymbol 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2975	2012-03-27 18:43	2011-08-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198401	7.3	HIGH Network	dot-prop_project	dot-prop	Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as …	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-8116	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198402	6.1	MEDIUM Network	revive-adserver	revive_adserver	A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver <= 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session …	CWE-79 Cross-site Scripting	CVE-2020-8115	2024-11-21 14:38	2020-02-5	Show	GitHub Exploit DB Packet Storm

198403	9.8	CRITICAL Network	phpabook_project	phpabook	An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password.	CWE-287 Improper Authentication	CVE-2020-8510	2024-11-21 14:38	2020-02-4	Show	GitHub Exploit DB Packet Storm

198404	4.3	MEDIUM Network	prototypejs	prototype	Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field.	CWE-862 Missing Authorization	CVE-2020-7993	2024-11-21 14:38	2020-02-4	Show	GitHub Exploit DB Packet Storm

198405	9.8	CRITICAL Network	norman	malware_cleaner	nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled.	CWE-787 Out-of-bounds Write	CVE-2020-8508	2024-11-21 14:38	2020-02-3	Show	GitHub Exploit DB Packet Storm

198406	6.1	MEDIUM Network	maxum	rumpus	An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functiona…	CWE-79 Cross-site Scripting	CVE-2020-8514	2024-11-21 14:38	2020-02-3	Show	GitHub Exploit DB Packet Storm

198407	5.3	MEDIUM Network	torproject	tor	The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to di…	NVD-CWE-noinfo	CVE-2020-8516	2024-11-21 14:38	2020-02-2	Show	GitHub Exploit DB Packet Storm

198408	9.8	CRITICAL Network	draytek	vigor2960_firmware vigor300b_firmware vigor3900_firmware	DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacter…	CWE-78 OS Command	CVE-2020-8515	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198409	6.1	MEDIUM Network	icewarp	icewarp_server	In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.	CWE-79 Cross-site Scripting	CVE-2020-8512	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

198410	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.	CWE-352 Origin Validation Error	CVE-2020-8505	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed