Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249451 5 警告 IBM - IBM TDS の IDSWebApp における重要な情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2011-2758 2012-03-27 18:43 2011-06-27 Show GitHub Exploit DB Packet Storm
249452 5 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の FileDownload.jsp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-2757 2012-03-27 18:43 2011-07-17 Show GitHub Exploit DB Packet Storm
249453 5 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の FileDownload.jsp における特定のディレクトリからファイルを読まれる脆弱性 CWE-287
不適切な認証
CVE-2011-2756 2012-03-27 18:43 2011-07-17 Show GitHub Exploit DB Packet Storm
249454 5 警告 Zoho Corporation - ManageEngine ServiceDesk Plus の FileDownload.jsp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-2755 2012-03-27 18:43 2011-07-17 Show GitHub Exploit DB Packet Storm
249455 4.3 警告 IBM - IBM WCM および他の製品で使用される IBM WebSphere Portal の PageBuilder2 テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2754 2012-03-27 18:43 2011-07-17 Show GitHub Exploit DB Packet Storm
249456 6.8 警告 SquirrelMail Project - SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-2753 2012-03-27 18:43 2011-07-12 Show GitHub Exploit DB Packet Storm
249457 5.8 警告 SquirrelMail Project - SquirrelMail における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2011-2752 2012-03-27 18:43 2011-07-11 Show GitHub Exploit DB Packet Storm
249458 7.5 危険 parodia - Parodia における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-2751 2012-03-27 18:43 2011-07-17 Show GitHub Exploit DB Packet Storm
249459 5 警告 Novell - Novell File Reporter の NFRAgent.exe における任意のファイルを削除される脆弱性 CWE-399
リソース管理の問題
CVE-2011-2750 2012-03-27 18:43 2011-07-17 Show GitHub Exploit DB Packet Storm
249460 4 警告 OTRS プロジェクト - OTRS の OTRS-Core の Kernel/Modules/AdminPackageManager.pm における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2011-2746 2012-03-27 18:43 2011-08-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210171 7.5 HIGH
Network
iec104_project iec104 A segmentation violation in the Iec104_Deal_I function of IEC104 v1.0 allows attackers to cause a denial of service (DOS). CWE-476
 NULL Pointer Dereference
CVE-2020-18730 2024-11-21 14:08 2021-08-24 Show GitHub Exploit DB Packet Storm
210172 7.2 HIGH
Network
phpmywind phpmywind Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-18886 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210173 7.2 HIGH
Network
phpmywind phpmywind Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'. CWE-77
Command Injection
CVE-2020-18885 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210174 9.8 CRITICAL
Network
bludit bludit Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component 'bl-kereln/ajax/upload-logo.php'. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-18879 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210175 5.3 MEDIUM
Network
skycaiji skycaiji Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpStudy%5CWWW%5Cindex.php'. CWE-22
Path Traversal
CVE-2020-18878 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210176 7.5 HIGH
Network
wuzhicms wuzhicms SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'. CWE-89
SQL Injection
CVE-2020-18877 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210177 3.3 LOW
Local
libexe_project libexe A heap-based buffer overflow in the libexe_io_handle_read_coff_optional_header function of libyal libexe before 20181128. NOTE: the vendor has disputed this as described in libyal/libexe issue 1 on G… CWE-787
 Out-of-bounds Write
CVE-2020-18900 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210178 6.5 MEDIUM
Network
exiv2 exiv2 An uncontrolled memory allocation in DataBufdata(subBox.length-sizeof(box)) function of Exiv2 0.27 allows attackers to cause a denial of service (DOS) via a crafted input. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-18899 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210179 6.5 MEDIUM
Network
exiv2 exiv2 A stack exhaustion issue in the printIFDStructure function of Exiv2 0.27 allows remote attackers to cause a denial of service (DOS) via a crafted file. CWE-674
 Uncontrolled Recursion
CVE-2020-18898 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm
210180 7.8 HIGH
Local
libpff_project libpff An use-after-free vulnerability in the libpff_item_tree_create_node function of libyal Libpff before 20180623 allows attackers to cause a denial of service (DOS) or execute arbitrary code via a craft… CWE-416
 Use After Free
CVE-2020-18897 2024-11-21 14:08 2021-08-20 Show GitHub Exploit DB Packet Storm