Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249161 4.3 警告 cgiirc - CGI:IRC の nonjs インターフェースにおけるにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0050 2012-03-27 18:42 2011-02-18 Show GitHub Exploit DB Packet Storm
249162 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0048 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
249163 4.3 警告 MediaWiki - MediaWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0047 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
249164 6.8 警告 Mozilla Foundation - Bugzilla におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0046 2012-03-27 18:42 2011-01-28 Show GitHub Exploit DB Packet Storm
249165 6.8 警告 レッドハット - IcedTea における信頼できるソースからコードを実行するように見せかけることが出来る脆弱性 CWE-20
不適切な入力確認
CVE-2011-0025 2012-03-27 18:42 2011-02-4 Show GitHub Exploit DB Packet Storm
249166 4.7 警告 Fedora Project
レッドハット
- 389 Directory Server の setup スクリプトにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-0022 2012-03-27 18:42 2011-02-23 Show GitHub Exploit DB Packet Storm
249167 9.3 危険 VideoLAN - VideoLAN VLC Media Player の cdg.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0021 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
249168 7.5 危険 Fedora Project
レッドハット
- 389 Directory Server の slapd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-0019 2012-03-27 18:42 2011-02-22 Show GitHub Exploit DB Packet Storm
249169 9 危険 OpenVAS - OpenVAS Manager の email 関数における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2011-0018 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
249170 2.1 注意 The Tor Project - Tor における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2011-0016 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199131 7.2 HIGH
Network
sap abap_platform A Remote Code Execution vulnerability exists in the SAP NetWeaver (ABAP Server, up to release 7.40) and ABAP Platform (> release 7.40).Because of this, an attacker can exploit these products via Code… CWE-94
Code Injection
CVE-2020-6318 2024-11-21 14:35 2020-09-9 Show GitHub Exploit DB Packet Storm
199132 5.4 MEDIUM
Network
sap businessobjects_business_intelligence_platform SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), versions - 4.1, 4.2, allows an attacker with a non-administrative user account that can edit certain web page pro… CWE-79
Cross-site Scripting
CVE-2020-6312 2024-11-21 14:35 2020-09-9 Show GitHub Exploit DB Packet Storm
199133 5.3 MEDIUM
Network
sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform (Web Intelligence HTML interface) allows an attacker with edit document rights to upload any file (including script files) without proper file form… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-6288 2024-11-21 14:35 2020-09-9 Show GitHub Exploit DB Packet Storm
199134 6.1 MEDIUM
Network
sap fiori_launchpad SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, resulting in re… CWE-79
Cross-site Scripting
CVE-2020-6283 2024-11-21 14:35 2020-09-9 Show GitHub Exploit DB Packet Storm
199135 7.8 HIGH
Local
accusoft imagegear A code execution vulnerability exists in the DICOM parse_dicom_meta_info functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause an out-of-bounds write. An attacker can… CWE-787
 Out-of-bounds Write
CVE-2020-6152 2024-11-21 14:35 2020-09-2 Show GitHub Exploit DB Packet Storm
199136 9.8 CRITICAL
Network
accusoft imagegear A memory corruption vulnerability exists in the TIFF handle_COMPRESSION_PACKBITS functionality of Accusoft ImageGear 19.7. A specially crafted malformed file can cause a memory corruption. An attacke… CWE-787
CWE-704
 Out-of-bounds Write
 Incorrect Type Conversion or Cast
CVE-2020-6151 2024-11-21 14:35 2020-09-2 Show GitHub Exploit DB Packet Storm
199137 9.8 CRITICAL
Network
os4ed opensis A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The username variable which is set at line 121 in install/Step5.php allows for injection of PHP code in… CWE-94
Code Injection
CVE-2020-6144 2024-11-21 14:35 2020-09-2 Show GitHub Exploit DB Packet Storm
199138 9.8 CRITICAL
Network
os4ed opensis A remote code execution vulnerability exists in the install functionality of OS4Ed openSIS 7.4. The password variable which is set at line 122 in install/Step5.php allows for injection of PHP code in… CWE-94
Code Injection
CVE-2020-6143 2024-11-21 14:35 2020-09-2 Show GitHub Exploit DB Packet Storm
199139 9.8 CRITICAL
Network
os4ed opensis A remote code execution vulnerability exists in the Modules.php functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can cause local file inclusion. An attacker can send an HTTP reque… CWE-22
Path Traversal
CVE-2020-6142 2024-11-21 14:35 2020-09-2 Show GitHub Exploit DB Packet Storm
199140 9.8 CRITICAL
Network
os4ed opensis SQL injection vulnerability exists in the password reset functionality of OS4Ed openSIS 7.3. The password_stf_email parameter in the password reset page /opensis/ResetUserInfo.php is vulnerable to SQ… CWE-89
SQL Injection
CVE-2020-6140 2024-11-21 14:35 2020-09-2 Show GitHub Exploit DB Packet Storm