Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249181	6.2	警告	マイクロソフト metasploit	-	Metasploit Framework のインストーラにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1056	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249182	7.5	危険	lingxia273	-	Lingxia I.C.E CMS の api/ice_media.cfc における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1055	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249183	10	危険	Hex-Rays	-	Hex-Rays IDA Pro のPEF インプットファイルローダーにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-1054	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249184	4.3	警告	Hex-Rays	-	Hex-Rays IDA Pro の Mach-O インプットファイルローダーにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1053	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249185	10	危険	Hex-Rays	-	Hex-Rays IDA Pro の PSX/GEOS インプットファイルローダーにおける整数オーバフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1052	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249186	10	危険	Hex-Rays	-	Hex-Rays IDA Pro の COFF/EPOC/EXPLOAD インプットファイルローダーにおける整数オーバフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1051	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249187	10	危険	Hex-Rays	-	Hex-Rays IDA Pro における文字列エンコードの変換による脆弱性	CWE-noinfo 情報不足	CVE-2011-1050	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249188	6.8	警告	Hex-Rays	-	Hex-Rays IDA Pro の Mach-O インプットファイルローダーにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1049	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249189	7.5	危険	mihantools	-	MihanTools MihanTools の product.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1048	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

249190	7.5	危険	VastHTML	-	VastHTML Forum Server プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1047	2012-03-27 18:43	2011-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197901	7.5	HIGH Network	haxx siemens debian oracle splunk	libcurl sinec_infrastructure_network_services debian_linux communications_cloud_native_core_policy universal_forwarder	Due to use of a dangling pointer, libcurl 7.29.0 through 7.71.1 can use the wrong connection when sending data.	CWE-416 Use After Free	CVE-2020-8231	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

197902	7.8	HIGH Local	haxx debian fujitsu siemens splunk	curl debian_linux m10-1_firmware m10-4_firmware m10-4s_firmware m12-1_firmware m12-2_firmware m12-2s_firmware sinec_infrastructure_network_services universal_forwarder	curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.	CWE-74 Injection	CVE-2020-8177	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

197903	7.5	HIGH Network	haxx siemens debian splunk	curl simatic_tim_1531_irc_firmware debian_linux sinec_infrastructure_network_services universal_forwarder	curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).	CWE-200 Information Exposure	CVE-2020-8169	2024-11-21 14:38	2020-12-15	Show	GitHub Exploit DB Packet Storm

197904	7.8	HIGH Local	kia	head_unit_firmware	Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unauthorized commands, by executing the micomd executable deamon…	CWE-276 Incorrect Default Permissions	CVE-2020-8539	2024-11-21 14:38	2020-12-2	Show	GitHub Exploit DB Packet Storm

197905	7.8	HIGH Local	lenovo	pcmanager	A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with elevated privileges.	CWE-269 Improper Privilege Management	CVE-2020-8351	2024-11-21 14:38	2020-12-1	Show	GitHub Exploit DB Packet Storm

197906	6.5	MEDIUM Network	mongodb	ops_manager	Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 version…	NVD-CWE-noinfo	CVE-2020-7927	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

197907	6.5	MEDIUM Network	mongodb	mongodb	A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. This issue affects MongoDB Server v4.4 versions prior to 4.4…	NVD-CWE-Other	CVE-2020-7928	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

197908	6.5	MEDIUM Network	mongodb	mongodb	A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoD…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2020-7926	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

197909	7.5	HIGH Network	mongodb	mongodb	Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service…	CWE-20 Improper Input Validation	CVE-2020-7925	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

197910	7.4	HIGH Network	nextcloud	social	Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.	CWE-295 Improper Certificate Validation	CVE-2020-8279	2024-11-21 14:38	2020-11-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed