Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249371	7.5	危険	Ruby on Rails project	-	Ruby on Rails の actionpack/lib/action_view/template/resolver.rb におけるアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0449	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249372	7.5	危険	Ruby on Rails project	-	Ruby on Rails における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0448	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249373	6.8	警告	Ruby on Rails project	-	Ruby on Rails におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0447	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249374	4.3	警告	Ruby on Rails project	-	Ruby on Rails の mail_to ヘルパーにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0446	2012-03-27 18:42	2011-02-9	Show	GitHub Exploit DB Packet Storm

249375	6.8	警告	TinyBB	-	TinyBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0443	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

249376	3.5	注意	DELL EMC (旧 EMC Corporation)	-	EMC Avamar のサービスユーティリティにおける重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-0442	2012-03-27 18:42	2011-03-16	Show	GitHub Exploit DB Packet Storm

249377	6.3	警告	The PHP Group	-	PHP の Debian GNU/Linux /etc/cron.d/php5 クーロンジョブにおける任意のファイルを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0441	2012-03-27 18:42	2011-03-29	Show	GitHub Exploit DB Packet Storm

249378	5.8	警告	Mahara	-	Mahara におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0440	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

249379	4.3	警告	Mahara	-	Mahara におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0439	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

249380	6.8	警告	arthurdejong	-	nss-pam-ldapd PAM モジュールにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-0438	2012-03-27 18:42	2011-03-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197541	9.8	CRITICAL Network	opensmtpd canonical fedoraproject debian	opensmtpd ubuntu_linux fedora debian_linux	OpenSMTPD before 6.6.4 allows remote code execution because of an out-of-bounds read in mta_io in mta_session.c for multi-line replies. Although this vulnerability affects the client side of OpenSMTP…	CWE-125 Out-of-bounds Read	CVE-2020-8794	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

197542	4.7	MEDIUM Local	opensmtpd fedoraproject canonical	opensmtpd fedora ubuntu_linux	OpenSMTPD before 6.6.4 allows local users to read arbitrary files (e.g., on some Linux distributions) because of a combination of an untrusted search path in makemap.c and race conditions in the offl…	CWE-426 CWE-367 Untrusted Search Path Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-8793	2024-11-21 14:39	2020-02-26	Show	GitHub Exploit DB Packet Storm

197543	8.1	HIGH Network	cardgate	cardgate_payments	An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attack…	CWE-346 Origin Validation Error	CVE-2020-8819	2024-11-21 14:39	2020-02-25	Show	GitHub Exploit DB Packet Storm

197544	8.1	HIGH Network	cardgate adobe	cardgate_payments magento	An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows a…	CWE-346 Origin Validation Error	CVE-2020-8818	2024-11-21 14:39	2020-02-25	Show	GitHub Exploit DB Packet Storm

197545	9.8	CRITICAL Network	couchbase	couchbase_server	Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticat…	CWE-276 Incorrect Default Permissions	CVE-2020-9039	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197546	8.8	HIGH Network	cacti fedoraproject opmantek opensuse debian	cacti fedora open-audit suse_package_hub debian_linux	graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.	CWE-78 OS Command	CVE-2020-8813	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197547	8.8	HIGH Adjacent	dlink	dap-2610_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this …	CWE-287 Improper Authentication	CVE-2020-8862	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197548	8.8	HIGH Adjacent	dlink	dap-1330_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploi…	CWE-287 Improper Authentication	CVE-2020-8861	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197549	8.0	HIGH Adjacent	google	android	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User…	CWE-787 Out-of-bounds Write	CVE-2020-8860	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

197550	6.1	MEDIUM Network	westerndigital	mycloud.com	Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-8960	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed