Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249111 5 警告 s9y - Serendipity における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3800 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249112 5 警告 php link directory - phpLD における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3782 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249113 5 警告 PHPIDS - PHPIDS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3781 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249114 5 警告 phpicalendar - PHP iCalendar における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3780 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249115 5 警告 idevSpot - PhpHostBot における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3779 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249116 5 警告 phpgedview - PhpGedView における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3778 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249117 5 警告 PhpFreeChat - phpFreeChat における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3777 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249118 5 警告 musawir ali - phpFormGenerator における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3776 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249119 5 警告 litoweb - PHPfileNavigator における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3775 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
249120 5 警告 bishop bettini - phpESP における 重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3774 2012-03-27 18:43 2011-09-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210711 5.4 MEDIUM
Network 		requarks wiki.js In Wiki.js before version 2.5.162, an XSS payload can be injected in a page title and executed via the search results. While the title is properly escaped in both the navigation links and the actual … - CVE-2020-15274 2024-11-21 14:05 2020-10-27 Show GitHub Exploit DB Packet Storm
210712 9.6 CRITICAL
Network 		git-tag-annotation-action_project git-tag-annotation-action In the git-tag-annotation-action (open source GitHub Action) before version 1.0.1, an attacker can execute arbitrary (*) shell commands if they can control the value of [the `tag` input] or manage to… - CVE-2020-15272 2024-11-21 14:05 2020-10-27 Show GitHub Exploit DB Packet Storm
210713 8.8 HIGH
Network 		lookatme_project lookatme In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown … CWE-78
OS Command  		CVE-2020-15271 2024-11-21 14:05 2020-10-27 Show GitHub Exploit DB Packet Storm
210714 4.3 MEDIUM
Network 		parseplatform parse-server Parse Server (npm package parse-server) broadcasts events to all clients without checking if the session token is valid. This allows clients with expired sessions to still receive subscription object… CWE-672
 Operation on a Resource after Expiration or Release 		CVE-2020-15270 2024-11-21 14:05 2020-10-23 Show GitHub Exploit DB Packet Storm
210715 7.5 HIGH
Network 		google tensorflow In Tensorflow before version 2.4.0, when the `boxes` argument of `tf.image.crop_and_resize` has a very large value, the CPU kernel implementation receives it as a C++ `nan` floating point value. Atte… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-15266 2024-11-21 14:05 2020-10-22 Show GitHub Exploit DB Packet Storm
210716 7.5 HIGH
Network 		google tensorflow In Tensorflow before version 2.4.0, an attacker can pass an invalid `axis` value to `tf.quantization.quantize_and_dequantize`. This results in accessing a dimension outside the rank of the input tens… - CVE-2020-15265 2024-11-21 14:05 2020-10-22 Show GitHub Exploit DB Packet Storm
210717 7.2 HIGH
Network 		openmage magento In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger RCE via PHP Object Injection through prod… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-15244 2024-11-21 14:05 2020-10-22 Show GitHub Exploit DB Packet Storm
210718 9.1 CRITICAL
Network 		sparksolutions spree In Spree before versions 3.7.11, 4.0.4, or 4.1.11, expired user tokens could be used to access Storefront API v2 endpoints. The issue is patched in versions 3.7.11, 4.0.4 and 4.1.11. A workaround wit… CWE-613
 Insufficient Session Expiration 		CVE-2020-15269 2024-11-21 14:05 2020-10-21 Show GitHub Exploit DB Packet Storm
210719 9.1 CRITICAL
Network 		auth0 omniauth-auth0 omniauth-auth0 (rubygems) versions >= 2.3.0 and < 2.4.1 improperly validate the JWT token signature when using the `jwt_validator.verify` method. Improper validation of the JWT token signature can al… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-15240 2024-11-21 14:05 2020-10-22 Show GitHub Exploit DB Packet Storm
210720 6.1 MEDIUM
Network 		orchid platform In platform before version 9.4.4, inline attributes are not properly escaped. If the data that came from users was not escaped, then an XSS vulnerability is possible. The issue was introduced in 9.0.… - CVE-2020-15263 2024-11-21 14:05 2020-10-20 Show GitHub Exploit DB Packet Storm