Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249231	5.8	警告	WordPress.org	-	WordPress におけるクリックジャックの脆弱性	CWE-20 不適切な入力確認	CVE-2011-3127	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249232	5	警告	WordPress.org	-	WordPress におけるユーザ名を特定される脆弱性	CWE-200 情報漏えい	CVE-2011-3126	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249233	10	危険	WordPress.org	-	WordPress における脆弱性	CWE-noinfo 情報不足	CVE-2011-3125	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249234	7.2	危険	IBM	-	IBM InfoSphere DataStage および他の製品で使用される IBM InfoSphere Information Server における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3124	2012-03-27 18:43	2011-08-10	Show	GitHub Exploit DB Packet Storm

249235	7.2	危険	IBM	-	IBM InfoSphere DataStage および他の製品で使用される IBM InfoSphere Information Server における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3123	2012-03-27 18:43	2011-08-10	Show	GitHub Exploit DB Packet Storm

249236	10	危険	WordPress.org	-	WordPress における脆弱性	CWE-noinfo 情報不足	CVE-2011-3122	2012-03-27 18:43	2011-05-25	Show	GitHub Exploit DB Packet Storm

249237	5	警告	Novell	-	Novell Data Synchronizer の WebAdmin における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3014	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249238	5	警告	Novell	-	Novell Data Synchronizer の WebAdmin におけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-3013	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249239	10	危険	ioquake3 worldofpadman urbanterror tremulous	-	World of Padman などの製品で使用される ioQuake3 エンジンにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3012	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249240	5	警告	Ruby-lang.org	-	Ruby における乱数の値を推測される脆弱性	CWE-310 暗号の問題	CVE-2011-3009	2012-03-27 18:43	2011-08-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210611	9.8	CRITICAL Network	mruby debian	mruby debian_linux	mruby through 2.1.2-rc has a heap-based buffer overflow in the mrb_yield_with_class function in vm.c because of incorrect VM stack handling. It can be triggered via the stack_copy function.	CWE-787 Out-of-bounds Write	CVE-2020-15866	2024-11-21 14:06	2020-07-22	Show	GitHub Exploit DB Packet Storm

210612	7.8	HIGH Local	linux xen netapp	linux_kernel xen cloud_backup steelstore_cloud_integrated_storage solidfire_baseboard_management_controller	An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated task. This occurs b…	CWE-276 Incorrect Default Permissions	CVE-2020-15852	2024-11-21 14:06	2020-07-21	Show	GitHub Exploit DB Packet Storm

210613	8.1	HIGH Network	liferay	liferay_portal dxp	Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle attackers to execute arbitrary code via crafted serial…	CWE-502 Deserialization of Untrusted Data	CVE-2020-15842	2024-11-21 14:06	2020-07-20	Show	GitHub Exploit DB Packet Storm

210614	8.8	HIGH Network	liferay	liferay_portal dxp	Liferay Portal before 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote attacke…	NVD-CWE-noinfo	CVE-2020-15841	2024-11-21 14:06	2020-07-20	Show	GitHub Exploit DB Packet Storm

210615	8.8	HIGH Network	westerndigital	wd_discovery	In Western Digital WD Discovery before 4.0.251.0, a malicious application running with standard user permissions could potentially execute code in the application's process through library injection …	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-15816	2024-11-21 14:06	2020-07-18	Show	GitHub Exploit DB Packet Storm

210616	6.5	MEDIUM Network	gnu	libredwg	GNU LibreDWG before 0.11 allows NULL pointer dereferences via crafted input files.	CWE-476 NULL Pointer Dereference	CVE-2020-15807	2024-11-21 14:06	2020-07-18	Show	GitHub Exploit DB Packet Storm

210617	8.1	HIGH Network	graylog	graylog	Graylog before 3.3.3 lacks SSL Certificate Validation for LDAP servers. It allows use of an external user/group database stored in LDAP. The connection configuration allows the usage of unencrypted, …	CWE-295 Improper Certificate Validation	CVE-2020-15813	2024-11-21 14:06	2020-07-18	Show	GitHub Exploit DB Packet Storm

210618	6.1	MEDIUM Network	zabbix fedoraproject debian opensuse	zabbix fedora debian_linux leap backports	Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x before 5.0.2rc1 allows stored XSS in the URL Widget.	CWE-79 Cross-site Scripting	CVE-2020-15803	2024-11-21 14:06	2020-07-17	Show	GitHub Exploit DB Packet Storm

210619	9.8	CRITICAL Network	python netapp	python max_data	In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., the python._pth file)…	CWE-426 Untrusted Search Path	CVE-2020-15801	2024-11-21 14:06	2020-07-17	Show	GitHub Exploit DB Packet Storm

210620	6.7	MEDIUM Local	linux opensuse canonical	linux_kernel leap ubuntu_linux	An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot…	CWE-862 Missing Authorization	CVE-2020-15780	2024-11-21 14:06	2020-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed