Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 20, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249091 | 5.5 | 警告 | Roundcube.net | - | Roundcube Webmail の steps/utils/modcss.inc における重要な情報を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1492 | 2012-03-27 18:43 | 2011-04-8 | Show | GitHub Exploit DB Packet Storm |
| 249092 | 3.5 | 注意 | Roundcube.net | - | Roundcube Webmail のログインフォームにおける重要な情報を取得されるの脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1491 | 2012-03-27 18:43 | 2011-04-8 | Show | GitHub Exploit DB Packet Storm |
| 249093 | 6.8 | 警告 | レッドハット | - | Red Hat JBoss Enterprise SOA Platform および JBoss Enterprise Application Platform の JBoss Seam 2 framework の jboss-seam.jar における任意の Java コード実行を引き起こす脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-1484 | 2012-03-27 18:43 | 2011-04-20 | Show | GitHub Exploit DB Packet Storm |
| 249094 | 6.8 | 警告 | PHPNUKE | - | Francisco Burzi PHP-Nuke の mainfile.php におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2011-1482 | 2012-03-27 18:43 | 2011-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249095 | 4.3 | 警告 | PHPNUKE | - | Francisco Burzi PHP-Nuke におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-1481 | 2012-03-27 18:43 | 2011-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249096 | 3.5 | 注意 | Liferay | - | Liferay Portal CE におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-1504 | 2012-03-27 18:43 | 2010-07-22 | Show | GitHub Exploit DB Packet Storm |
| 249097 | 3.5 | 注意 | Liferay Apache Software Foundation オラクル |
- | Liferay Portal CE の XSL Content portlet における任意の XSL および XML ファイルを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2011-1503 | 2012-03-27 18:43 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 249098 | 7.5 | 危険 | PHPNUKE | - | Francisco Burzi PHP-Nuke の admin.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-1480 | 2012-03-27 18:43 | 2011-06-20 | Show | GitHub Exploit DB Packet Storm |
| 249099 | 7.2 | 危険 | ノキア | - | Nokia E75 携帯端末におけるデバイスロックコード回避の脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-1472 | 2012-03-27 18:43 | 2011-03-29 | Show | GitHub Exploit DB Packet Storm |
| 249100 | 4.3 | 警告 | The PHP Group | - | PHP の strval 関数におけるバッファーオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-1464 | 2012-03-27 18:43 | 2011-03-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 20, 2026, 4:14 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 212031 | 5.4 |
MEDIUM
Network |
pickplugins | accordion | An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher pe… |
CWE-79
Cross-site Scripting |
CVE-2020-13644 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212032 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of … |
CWE-352
Origin Validation Error |
CVE-2020-13643 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212033 | 8.8 |
HIGH
Network |
siteorigin | page_builder | An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged o… |
CWE-352
Origin Validation Error |
CVE-2020-13642 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212034 | 8.8 |
HIGH
Network |
infolific | real-time_find_and_replace | An issue was discovered in the Real-Time Find and Replace plugin before 4.0.2 for WordPress. The far_options_page function did not do any nonce verification, allowing for requests to be forged on beh… |
CWE-352
Origin Validation Error |
CVE-2020-13641 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212035 | 6.1 |
MEDIUM
Network |
fork-cms | fork_cms | Fork before 5.8.3 allows XSS via navigation_title or title. |
CWE-79
Cross-site Scripting |
CVE-2020-13633 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212036 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to host-monitoring/src/toolbar.php. This vulnerability is fixed in v… |
CWE-79
Cross-site Scripting |
CVE-2020-13628 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212037 | 6.1 |
MEDIUM
Network |
centreon |
centreon_host-monitoring_widget centreon_tactical-overview_widget centreon_service-monitoring_widget |
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the widgetId parameter to service-monitoring/src/index.php. This vulnerability is fixed in … |
CWE-79
Cross-site Scripting |
CVE-2020-13627 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212038 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade debian siemens oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware debian_linux sinec_infrastructu… |
ext/fts3/fts3_snippet.c in SQLite before 3.32.0 has a NULL pointer dereference via a crafted matchinfo() query. |
CWE-476
NULL Pointer Dereference |
CVE-2020-13632 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212039 | 5.5 |
MEDIUM
Local |
sqlite fedoraproject canonical netapp brocade siemens apple oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware sinec_infrastructure_network_servi… |
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c. |
NVD-CWE-noinfo
|
CVE-2020-13631 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |
| 212040 | 7.0 |
HIGH
Local |
sqlite fedoraproject canonical netapp brocade debian siemens apple oracle |
sqlite fedora ubuntu_linux cloud_backup solidfire\ _enterprise_sds_\&_hci_storage_node fabric_operating_system hci_compute_node_firmware debian_linux sinec_infrastructu… |
ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. |
CWE-416
Use After Free |
CVE-2020-13630 | 2024-11-21 14:01 | 2020-05-28 | Show | GitHub Exploit DB Packet Storm |