Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249141	7.5	危険	SUSE	-	SUSE Linux Enterprise Desktop の modify_resolvconf_suse スクリプトにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2660	2012-03-27 18:43	2011-09-6	Show	GitHub Exploit DB Packet Storm

249142	9.3	危険	Novell	-	Novell Cloud Manager の RPC 実装における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2654	2012-03-27 18:43	2011-08-30	Show	GitHub Exploit DB Packet Storm

249143	4.3	警告	Novell marcus schafer	-	SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2652	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249144	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi のファイルブラウザにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2651	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249145	4.3	警告	Novell marcus schafer	-	SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2650	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249146	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2649	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249147	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2648	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249148	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2647	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249149	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2646	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249150	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2645	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197921	8.8	HIGH Adjacent	dlink	dap-2610_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this …	CWE-287 Improper Authentication	CVE-2020-8862	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197922	8.8	HIGH Adjacent	dlink	dap-1330_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploi…	CWE-287 Improper Authentication	CVE-2020-8861	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197923	8.0	HIGH Adjacent	google	android	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User…	CWE-787 Out-of-bounds Write	CVE-2020-8860	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197924	6.1	MEDIUM Network	westerndigital	mycloud.com	Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-8960	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

197925	7.8	HIGH Local	trendmicro	vulnerability_protection	Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory.	CWE-427 Uncontrolled Search Path Element	CVE-2020-8601	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

197926	9.8	CRITICAL Network	arista	dcs-7050qx-32s-r_firmware dcs-7050cx3-32s-r_firmware dcs-7280sram-48c6-r_firmware	Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via …	NVD-CWE-noinfo	CVE-2020-9015	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

197927	5.4	MEDIUM Network	machothemes	modula_image_gallery	A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inje…	CWE-79 Cross-site Scripting	CVE-2020-9003	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

197928	9.1	CRITICAL Network	western_digital	my_cloud_home ibi	Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation.	CWE-384 Session Fixation	CVE-2020-8990	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

197929	7.8	HIGH Local	westerndigital	westerndigitalssddashboardsetup.exe sandiskssddashboardsetup.exe	Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.	CWE-427 Uncontrolled Search Path Element	CVE-2020-8959	2024-11-21 14:39	2020-02-20	Show	GitHub Exploit DB Packet Storm

197930	5.4	MEDIUM Network	hitrontech	coda-4582u_firmware	Hitron CODA-4582U 7.1.1.30 devices allow XSS via a Managed Device name on the Wireless > Access Control > Add Managed Device screen.	CWE-79 Cross-site Scripting	CVE-2020-8824	2024-11-21 14:39	2020-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed