Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249391 7.5 危険 phenotype-cms - Phenotype CMS の store 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-0407 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249392 6.8 警告 phpgedview - PhpGedView の module.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-0405 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249393 7.5 危険 netsupport - NetSupport Manager Agent におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-0404 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249394 9.3 危険 imgburn - ImgBurn の ImgBurn.exe における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2011-0403 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249395 6.8 警告 Debian - dpkg の dpkg-source における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2011-0402 2012-03-27 18:42 2011-01-6 Show GitHub Exploit DB Packet Storm
249396 5 警告 Piwik - Piwik におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0401 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249397 5 警告 Piwik - Piwik の Cookie.php におけるクッキーをキャプチャされる脆弱性 CWE-16
環境設定
CVE-2011-0400 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249398 4.3 警告 Piwik - Piwik におけるクリックジャック攻撃を誘発する脆弱性 CWE-Other
その他
CVE-2011-0399 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249399 6.4 警告 Piwik - Piwik の Piwik_Common::getIP 関数における位置情報取得とロギング機能を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0398 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
249400 9.3 危険 マイクロソフト - Windows XP の Microsoft Internet Explorer における不正な GUI 表示を誘発される脆弱性 CWE-Other
その他
CVE-2011-0347 2012-03-27 18:42 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212891 2.7 LOW
Network
jetbrains teamcity In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. NVD-CWE-noinfo
CVE-2020-11686 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
212892 7.5 HIGH
Network
jetbrains goland In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-11685 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
212893 8.1 HIGH
Adjacent
titan sf_rush_smart_band_firmware An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the a… CWE-347
CWE-306
CWE-319
 Improper Verification of Cryptographic Signature
Missing Authentication for Critical Function
Cleartext Transmission of Sensitive Information
CVE-2020-11539 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
212894 5.3 MEDIUM
Network
joomla joomla\! An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups. NVD-CWE-noinfo
CVE-2020-11891 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
212895 5.3 MEDIUM
Network
joomla joomla\! An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration. CWE-20
 Improper Input Validation 
CVE-2020-11890 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
212896 5.3 MEDIUM
Network
joomla joomla\! An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups. NVD-CWE-noinfo
CVE-2020-11889 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
212897 7.5 HIGH
Network
oppo coloros In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the s… CWE-908
 Use of Uninitialized Resource
CVE-2020-11828 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
212898 7.8 HIGH
Local
re2c
canonical
re2c
ubuntu_linux
re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. CWE-787
 Out-of-bounds Write
CVE-2020-11958 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
212899 9.8 CRITICAL
Network
evenroute iqrouter_firmware IQrouter through 3.3.1, when unconfigured, has multiple remote code execution vulnerabilities in the web-panel because of Bash Shell Metacharacter Injection. Note: The vendor claims that this vulnera… CWE-78
OS Command 
CVE-2020-11963 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
212900 6.1 MEDIUM
Network
bitcoin-abe_project bitcoin-abe Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception. CWE-79
Cross-site Scripting
CVE-2020-11944 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm