Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249361 5 警告 The Tor Project - Tor におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0492 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
249362 5 警告 The Tor Project - Tor の tor_realloc 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0491 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
249363 5 警告 The Tor Project - Tor におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2011-0490 2012-03-27 18:42 2011-01-17 Show GitHub Exploit DB Packet Storm
249364 4.3 警告 IBM - IBM Cognos 8 BI の cognos.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0486 2012-03-27 18:42 2011-01-18 Show GitHub Exploit DB Packet Storm
249365 6.9 警告 Novell - openSUSE の aaa_base パッケージにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0468 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
249366 6.4 警告 Novell - SUSE OBS の API におけるパッケージまたはプロジェクトの書き込みアクセス制限を回避する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0466 2012-03-27 18:42 2011-03-2 Show GitHub Exploit DB Packet Storm
249367 10 危険 Novell - Novell Vibe OnPrem における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-0464 2012-03-27 18:42 2011-02-25 Show GitHub Exploit DB Packet Storm
249368 2.1 注意 Linux - Linux kernel の ocfs2_prepare_page_for_write 関数における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0463 2012-03-27 18:42 2011-04-9 Show GitHub Exploit DB Packet Storm
249369 4.3 警告 Novell - SUSE OBS のログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0462 2012-03-27 18:42 2011-03-2 Show GitHub Exploit DB Packet Storm
249370 6.3 警告 Novell - openSUSE の /etc/init.d/boot.localfs における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0461 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211111 9.8 CRITICAL
Network 		mofinetwork mofi4500-4gxelte_firmware An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the… CWE-287
CWE-755
Improper Authentication
 Improper Handling of Exceptional Conditions 		CVE-2020-13859 2024-11-21 14:02 2021-02-1 Show GitHub Exploit DB Packet Storm
211112 9.8 CRITICAL
Network 		mofinetwork mofi4500-4gxelte_firmware An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passw… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-13858 2024-11-21 14:02 2021-02-1 Show GitHub Exploit DB Packet Storm
211113 7.5 HIGH
Network 		mofinetwork mofi4500-4gxelte_firmware An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request. NVD-CWE-noinfo
CVE-2020-13857 2024-11-21 14:02 2021-02-1 Show GitHub Exploit DB Packet Storm
211114 7.5 HIGH
Network 		mofinetwork mofi4500-4gxelte_firmware An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentia… CWE-306
Missing Authentication for Critical Function 		CVE-2020-13856 2024-11-21 14:02 2021-02-1 Show GitHub Exploit DB Packet Storm
211115 7.2 HIGH
Network 		mi ax1800_firmware
rm1800_firmware 		There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and… CWE-77
Command Injection 		CVE-2020-14102 2024-11-21 14:02 2021-01-14 Show GitHub Exploit DB Packet Storm
211116 7.5 HIGH
Network 		mi ax1800_firmware
rm1800_firmware 		The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. NVD-CWE-noinfo
CVE-2020-14101 2024-11-21 14:02 2021-01-14 Show GitHub Exploit DB Packet Storm
211117 7.5 HIGH
Network 		mi ax1800_firmware
rm1800_firmware 		The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800… CWE-662
 Improper Synchronization 		CVE-2020-14098 2024-11-21 14:02 2021-01-14 Show GitHub Exploit DB Packet Storm
211118 7.5 HIGH
Network 		mi redmi_ax6_firmware Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18. NVD-CWE-noinfo
CVE-2020-14097 2024-11-21 14:02 2021-01-14 Show GitHub Exploit DB Packet Storm
211119 9.8 CRITICAL
Network 		hcltechsw hcl_commerce Security vulnerability in HCL Commerce 9.0.0.5 through 9.0.0.13, 9.0.1.0 through 9.0.1.14 and 9.1 through 9.1.4 could allow denial of service, disclosure of user personal data, and performing of unau… NVD-CWE-noinfo
CVE-2020-14275 2024-11-21 14:02 2021-01-13 Show GitHub Exploit DB Packet Storm
211120 7.5 HIGH
Network 		hcltechsw hcl_commerce Information disclosure vulnerability in HCL Commerce 9.0.1.9 through 9.0.1.14 and 9.1 through 9.1.4 could allow a remote attacker to obtain user personal data via unknown vectors. NVD-CWE-noinfo
CVE-2020-14274 2024-11-21 14:02 2021-01-13 Show GitHub Exploit DB Packet Storm