Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249241	7.5	危険	icanlocalize	-	Translation Management モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1663	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249242	4.3	警告	icanlocalize	-	Translation Management モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1662	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249243	3.3	注意	ncpfs	-	ncpfs における /etc/mtab ファイルの破損を誘発する脆弱性	CWE-16 環境設定	CVE-2011-1679	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249244	4.6	警告	kernel.org	-	util-linux の mount における脆弱性	CWE-16 環境設定	CVE-2011-1677	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249245	3.3	注意	kernel.org	-	util-linux の mount におけるファイル破損を誘発する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1676	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249246	3.3	注意	kernel.org	-	util-linux の mount におけるファイル破損を誘発する脆弱性	CWE-16 環境設定	CVE-2011-1675	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249247	6.8	警告	ネットギア	-	NetGear ProSafe WNAP210 における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-1674	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249248	5	警告	ネットギア	-	NetGear ProSafe WNAP210 の BackupConfig.php における管理者パスワードを取得される脆弱性	CWE-310 暗号の問題	CVE-2011-1673	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249249	5	警告	デル	-	Dell KACE K2000 Systems Deployment Appliance における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-1672	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

249250	4.3	警告	getontracks	-	Tracks の app/controllers/todos_controller.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1671	2012-03-27 18:43	2011-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210931	5.9	MEDIUM Network	mutt debian neomutt fedoraproject canonical opensuse	mutt debian_linux neomutt fedora ubuntu_linux leap	Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g.,…	CWE-74 Injection	CVE-2020-14954	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210932	8.8	HIGH Network	aapanel	aapanel	aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request (start, stop, or restart) to the setti…	CWE-78 OS Command	CVE-2020-14950	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210933	9.8	CRITICAL Network	tendenci	tendenci	Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.	CWE-502 Deserialization of Untrusted Data	CVE-2020-14942	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210934	8.8	HIGH Network	squirrelmail	squirrelmail	compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object…	CWE-502 Deserialization of Untrusted Data	CVE-2020-14933	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210935	9.8	CRITICAL Network	squirrelmail	squirrelmail	compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php.	CWE-502 Deserialization of Untrusted Data	CVE-2020-14932	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210936	9.8	CRITICAL Network	dmitry_project	dmitry	A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_…	CWE-787 Out-of-bounds Write	CVE-2020-14931	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210937	8.1	HIGH Network	bt_ctroms_terminal_project	bt_ctroms_terminal	An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp req…	CWE-319 CWE-522 Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials	CVE-2020-14930	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210938	7.5	HIGH Network	alpine_project fedoraproject debian	alpine fedora debian_linux	Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the…	NVD-CWE-Other	CVE-2020-14929	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210939	4.8	MEDIUM Network	naviwebs	navigate_cms	Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen.	CWE-79 Cross-site Scripting	CVE-2020-14927	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210940	5.4	MEDIUM Network	cmsmadesimple	cms_made_simple	CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page.	CWE-79 Cross-site Scripting	CVE-2020-14926	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed