Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249321 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi のファイルブラウザにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2651 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249322 4.3 警告 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2650 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249323 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2649 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249324 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2648 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249325 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2647 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249326 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2646 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249327 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2645 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249328 4.3 警告 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2644 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249329 6.8 警告 The phpMyAdmin Project - phpMyAdmin の sql.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2643 2012-03-27 18:43 2011-07-23 Show GitHub Exploit DB Packet Storm
249330 2.6 注意 The phpMyAdmin Project - phpMyAdmin の table Print view 実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2642 2012-03-27 18:43 2011-07-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197461 7.8 HIGH
Local 		patriotmemory viper_rgb_firmware Patriot Viper RGB Driver 1.1 and prior exposes IOCTL and allows insufficient access control. The IOCTL Codes 0x80102050 and 0x80102054 allows a local user with low privileges to read/write 1/2/4 byte… NVD-CWE-noinfo
CVE-2020-9756 2024-11-21 14:41 2020-03-7 Show GitHub Exploit DB Packet Storm
197462 9.8 CRITICAL
Network 		unctad asycuda_world An issue was discovered in UNCTAD ASYCUDA World 2001 through 2020. The Java RMI Server has an Insecure Default Configuration, leading to Java Code Execution from a remote URL because an RMI Distribut… NVD-CWE-noinfo
CVE-2020-9761 2024-11-21 14:41 2020-03-5 Show GitHub Exploit DB Packet Storm
197463 9.8 CRITICAL
Network 		craftcms craft_cms The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontainers controller. CWE-74
Injection 		CVE-2020-9757 2024-11-21 14:41 2020-03-5 Show GitHub Exploit DB Packet Storm
197464 9.1 CRITICAL
Network 		naver cloud_explorer Naver Cloud Explorer before 2.2.2.11 allows the system to download an arbitrary file from the attacker's server and execute it during the upgrade. CWE-494
 Download of Code Without Integrity Check 		CVE-2020-9751 2024-11-21 14:41 2020-03-3 Show GitHub Exploit DB Packet Storm
197465 5.4 MEDIUM
Network 		arcadyan vrv9506jac23_firmware Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and domain_name paramet… CWE-79
Cross-site Scripting 		CVE-2020-9419 2024-11-21 14:40 2022-12-14 Show GitHub Exploit DB Packet Storm
197466 6.5 MEDIUM
Network 		arcadyan vrv9506jac23_firmware The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative cred… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-9420 2024-11-21 14:40 2022-12-14 Show GitHub Exploit DB Packet Storm
197467 6.8 MEDIUM
Physics 		sonos one_firmware Some versions of Sonos One (1st and 2nd generation) allow partial or full memory access via attacker controlled hardware that can be attached to the Mini-PCI Express slot on the motherboard that host… NVD-CWE-noinfo
CVE-2020-9285 2024-11-21 14:40 2022-10-21 Show GitHub Exploit DB Packet Storm
197468 7.5 HIGH
Network 		huawei magic_ui
emui 		There is a Missing Cryptographic Step vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause DoS of Samgr. NVD-CWE-Other
CVE-2020-9158 2024-11-21 14:40 2021-07-1 Show GitHub Exploit DB Packet Storm
197469 9.8 CRITICAL
Network 		apache
qos 		chainsaw
log4j
reload4j 		A deserialization flaw was found in Apache Chainsaw versions prior to 2.1.0 which could lead to malicious code execution. CWE-502
 Deserialization of Untrusted Data 		CVE-2020-9493 2024-11-21 14:40 2021-06-16 Show GitHub Exploit DB Packet Storm
197470 7.8 HIGH
Local 		acronis true_image_2020 An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate fr… CWE-276
Incorrect Default Permissions  		CVE-2020-9450 2024-11-21 14:40 2021-05-25 Show GitHub Exploit DB Packet Storm