Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249401	3.3	注意	Alcatel-Lucent	-	Alcatel-Lucent OmniVista の NMS サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0345	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249402	5.8	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniPCX Enterprise の CGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0344	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249403	6.9	警告	balabit	-	Balabit syslog-ng におけるログファイルを読み書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0343	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

249404	10	危険	Schneider Electric	-	InduSoft Web Studio の InduSoft ISSymbol ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0342	2012-03-27 18:42	2011-09-2	Show	GitHub Exploit DB Packet Storm

249405	9.3	危険	Artifex Software	-	MuPDF プラグインの pdfmoz_onmouse 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0341	2012-03-27 18:42	2011-05-13	Show	GitHub Exploit DB Packet Storm

249406	9.3	危険	Foxit Software Inc	-	Foxit Reader における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0332	2012-03-27 18:42	2011-02-25	Show	GitHub Exploit DB Packet Storm

249407	9.3	危険	Honeywell International Inc.	-	Honeywell ScanServer ActiveX コントロールの addOSPLext メソッドにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0331	2012-03-27 18:42	2011-03-22	Show	GitHub Exploit DB Packet Storm

249408	5	警告	デル	-	DellSystemLite.ocx の Dell DellSystemLite.Scanner ActiveX コントロールにおける任意の WQL 文を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0330	2012-03-27 18:42	2011-02-21	Show	GitHub Exploit DB Packet Storm

249409	5	警告	デル	-	DellSystemLite.ocx の Dell DellSystemLite.Scanner ActiveX コントロールの GetData メソッドにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0329	2012-03-27 18:42	2011-02-21	Show	GitHub Exploit DB Packet Storm

249410	9.3	危険	topazsystems	-	Topaz Systems SigPlus Pro ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0324	2012-03-27 18:42	2011-02-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210741	5.3	MEDIUM Network	concretecms	concrete_cms	Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value.	NVD-CWE-noinfo	CVE-2020-14961	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210742	7.2	HIGH Network	php-fusion	php-fusion	A SQL injection vulnerability in PHP-Fusion 9.03.50 affects the endpoint administration/comments.php via the ctype parameter,	CWE-89 SQL Injection	CVE-2020-14960	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210743	5.4	MEDIUM Network	goldplugins	easy_testimonials	Multiple XSS vulnerabilities in the Easy Testimonials plugin before 3.6 for WordPress allow remote attackers to inject arbitrary web script or HTML via the wp-admin/post.php Client Name, Position, We…	CWE-79 Cross-site Scripting	CVE-2020-14959	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210744	6.5	MEDIUM Network	gogs	gogs	In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check.	CWE-281 Improper Preservation of Permissions	CVE-2020-14958	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210745	5.9	MEDIUM Network	mutt debian neomutt fedoraproject canonical opensuse	mutt debian_linux neomutt fedora ubuntu_linux leap	Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g.,…	CWE-74 Injection	CVE-2020-14954	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210746	8.8	HIGH Network	aapanel	aapanel	aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request (start, stop, or restart) to the setti…	CWE-78 OS Command	CVE-2020-14950	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210747	9.8	CRITICAL Network	tendenci	tendenci	Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py.	CWE-502 Deserialization of Untrusted Data	CVE-2020-14942	2024-11-21 14:04	2020-06-22	Show	GitHub Exploit DB Packet Storm

210748	8.8	HIGH Network	squirrelmail	squirrelmail	compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object…	CWE-502 Deserialization of Untrusted Data	CVE-2020-14933	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210749	9.8	CRITICAL Network	squirrelmail	squirrelmail	compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php.	CWE-502 Deserialization of Untrusted Data	CVE-2020-14932	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm

210750	9.8	CRITICAL Network	dmitry_project	dmitry	A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_…	CWE-787 Out-of-bounds Write	CVE-2020-14931	2024-11-21 14:04	2020-06-20	Show	GitHub Exploit DB Packet Storm