Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 20, 2026, 2:09 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249341 | 5 | 警告 | Ulli Horlacher | - | F*EX におけるファイルをアップロードされる脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-1409 | 2012-03-27 18:43 | 2011-06-24 | Show | GitHub Exploit DB Packet Storm |
| 249342 | 7.5 | 危険 | Exim Development | - | Exim の DKIM 実装における任意のコードを実行させる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1407 | 2012-03-27 18:43 | 2011-05-16 | Show | GitHub Exploit DB Packet Storm |
| 249343 | 4.3 | 警告 | Mahara | - | Mahara における資格情報を取得される脆弱性 |
CWE-16
環境設定 |
CVE-2011-1406 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 249344 | 3.5 | 注意 | Mahara | - | Mahara におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-1405 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 249345 | 4 | 警告 | Mahara | - | Mahara における重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-1404 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 249346 | 6.8 | 警告 | Mahara | - | Mahara の pieforms の実装におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2011-1403 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 249347 | 6.5 | 警告 | Mahara | - | Mahara におけるアクセスをブロックされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-1402 | 2012-03-27 18:43 | 2011-05-13 | Show | GitHub Exploit DB Packet Storm |
| 249348 | 3.5 | 注意 | ikiwiki | - | ikiwiki におけるクロスサイトスクリプティング攻撃をされる脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-1401 | 2012-03-27 18:43 | 2011-04-11 | Show | GitHub Exploit DB Packet Storm |
| 249349 | 6.8 | 警告 | Debian Canonical |
- | Debian GNU/Linux squeeze などの製品で使用される shell_escape_commands 命令の初期設定における任意のコードを実行される脆弱性 |
CWE-16
環境設定 |
CVE-2011-1400 | 2012-03-27 18:43 | 2011-03-22 | Show | GitHub Exploit DB Packet Storm |
| 249350 | 5 | 警告 | IBM | - | IBM WAS の管理コンソールにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-1359 | 2012-03-27 18:43 | 2011-09-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 20, 2026, 4:14 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 199941 | 4.3 |
MEDIUM
Network |
f5 | big-ip_advanced_firewall_manager | In versions 15.0.0-15.1.0.5, 14.1.0-14.1.2.7, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a vulnerability in the BIG-IP AFM Configuration utility may allow any authenticated BIG-IP user to… |
CWE-89
SQL Injection |
CVE-2020-5920 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199942 | 7.5 |
HIGH
Network |
f5 | big-ip_access_policy_manager | In versions 15.1.0-15.1.0.4, rendering of certain session variables by BIG-IP APM UI-based agents in an access profile configured with Modern customization, may cause the Traffic Management Microkern… |
NVD-CWE-noinfo
|
CVE-2020-5919 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199943 | 7.5 |
HIGH
Network |
f5 | big-ip_application_security_manager | In BIG-IP ASM versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed server cookie scenario may cause BD to restart under some … |
NVD-CWE-noinfo
|
CVE-2020-5914 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199944 | 7.5 |
HIGH
Network |
f5 |
big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system big-ip_fraud_protection_service<… |
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol (SIP) ALG profile, parsing SIP messages that contain a multi-part … |
CWE-404
Improper Resource Shutdown or Release |
CVE-2020-5926 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199945 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, undisclosed internally generated UDP traffic may cause the Traffic Managem… |
CWE-754
Improper Check for Unusual or Exceptional Conditions |
CVE-2020-5925 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199946 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
in BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.6, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, Syn flood causes large number of MCPD context messages destined to seconda… |
NVD-CWE-noinfo
|
CVE-2020-5921 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199947 | 5.4 |
MEDIUM
Adjacent |
f5 |
big-iq_centralized_management big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager… |
In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1 and BIG-IQ versions 5.4.0-7.0.0, Self-IP port-lockdown bypass via IPv6 link-local addresses. |
NVD-CWE-noinfo
|
CVE-2020-5923 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199948 | 8.8 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
In BIG-IP versions 15.0.0-15.1.0.4, 14.1.0-14.1.2.6, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2, iControl REST does not implement Cross Site Request Forgery protections for users which mak… |
CWE-352
Origin Validation Error |
CVE-2020-5922 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199949 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management Microkernel (TMM) may stop responding when processi… |
NVD-CWE-noinfo
|
CVE-2020-5918 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |
| 199950 | 5.9 |
MEDIUM
Network |
f5 |
big-iq_centralized_management big-ip_advanced_firewall_manager big-ip_local_traffic_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big… |
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.4, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.2 and BIG-IQ versions 5.2.0-7.0.0, the host OpenSSH servers utilize keys of l… |
CWE-326
Inadequate Encryption Strength |
CVE-2020-5917 | 2024-11-21 14:34 | 2020-08-27 | Show | GitHub Exploit DB Packet Storm |