Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249501	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2647	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249502	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2646	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249503	7.5	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2645	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249504	4.3	警告	Novell marcus schafer	-	SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2644	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249505	6.8	警告	The phpMyAdmin Project	-	phpMyAdmin の sql.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2643	2012-03-27 18:43	2011-07-23	Show	GitHub Exploit DB Packet Storm

249506	2.6	注意	The phpMyAdmin Project	-	phpMyAdmin の table Print view 実装におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2642	2012-03-27 18:43	2011-07-23	Show	GitHub Exploit DB Packet Storm

249507	6.4	警告	ヒューレット・パッカード	-	HP OpenView Performance Agent および Operations Agent の ovbbccb.exe における任意のファイルを削除される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2608	2012-03-27 18:43	2011-07-1	Show	GitHub Exploit DB Packet Storm

249508	4.3	警告	IBM	-	IBM RTC におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2607	2012-03-27 18:43	2011-05-27	Show	GitHub Exploit DB Packet Storm

249509	4.3	警告	IBM	-	IBM RTC の Web UI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2606	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

249510	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および Thunderbird の nsCookieService::SetCookieStringInternal 関数における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-2605	2012-03-27 18:43	2011-06-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210241	7.6	HIGH Network	mozilla	vpn	An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as …	CWE-384 Session Fixation	CVE-2020-15679	2024-11-21 14:06	2022-12-23	Show	GitHub Exploit DB Packet Storm

210242	5.3	MEDIUM Network	fedoraproject	supybot-fedora	supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time.	NVD-CWE-noinfo	CVE-2020-15853	2024-11-21 14:06	2022-10-18	Show	GitHub Exploit DB Packet Storm

210243	6.1	MEDIUM Network	redhat	bodhi	Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.	CWE-79 Cross-site Scripting	CVE-2020-15855	2024-11-21 14:06	2022-10-8	Show	GitHub Exploit DB Packet Storm

210244	7.5	HIGH Network	lemonldap-ng debian	lemonldap\ debian_linux	In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::L…	CWE-295 Improper Certificate Validation	CVE-2020-16093	2024-11-21 14:06	2022-07-18	Show	GitHub Exploit DB Packet Storm

210245	6.5	MEDIUM Local	emerson	openenterprise_scada_server	Inadequate encryption may allow the credentials used by Emerson OpenEnterprise, up through version 3.3.5, to access field devices and external systems to be obtained.	CWE-326 Inadequate Encryption Strength	CVE-2020-16235	2024-11-21 14:06	2022-05-20	Show	GitHub Exploit DB Packet Storm

210246	8.8	HIGH Network	bachmann	mx207_firmware mx213_firmware mx220_firmware mc206_firmware mc212_firmware mc220_firmware mh230_firmware mc205_firmware mc210_firmware mh212_firmware me203_firmware c…	The affected Bachmann Electronic M-Base Controllers of version MSYS v1.06.14 and later use weak cryptography to protect device passwords. Affected controllers that are actively supported include MX20…	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2020-16231	2024-11-21 14:06	2022-05-20	Show	GitHub Exploit DB Packet Storm

210247	9.8	CRITICAL Network	fieldcommgroup	hipserver hart-ip_developer_kit_firmware	A malicious attacker could exploit the interface of the Fieldcomm Group HART-IP (release 1.0.0.0) by constructing messages with sufficiently large payloads to overflow the internal buffer and crash t…	-	CVE-2020-16209	2024-11-21 14:06	2022-05-20	Show	GitHub Exploit DB Packet Storm

210248	9.8	CRITICAL Network	yokogawa	widefield3	In Yokogawa WideField3 R1.01 - R4.03, a buffer overflow could be caused when a user loads a maliciously crafted project file.	CWE-120 Classic Buffer Overflow	CVE-2020-16232	2024-11-21 14:06	2022-03-19	Show	GitHub Exploit DB Packet Storm

210249	4.5	MEDIUM Adjacent	fortinet	fortios	A improper input validation in Fortinet FortiGate version 6.4.3 and below, version 6.2.5 and below, version 6.0.11 and below, version 5.6.13 and below allows attacker to disclose sensitive informatio…	CWE-20 Improper Input Validation	CVE-2020-15936	2024-11-21 14:06	2022-03-2	Show	GitHub Exploit DB Packet Storm

210250	5.3	MEDIUM Network	fortinet	fortimail	A exposure of sensitive information to an unauthorized actor in Fortinet FortiMail versions 6.0.9 and below, FortiMail versions 6.2.4 and below FortiMail versions 6.4.1 and 6.4.0 allows attacker to o…	CWE-200 Information Exposure	CVE-2020-15933	2024-11-21 14:06	2022-01-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed