Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249621 5 警告 SmarterTools Inc. - SmarterTools SmarterStats Web サーバの Login.aspx における資格情報を発見される脆弱性 CWE-200
情報漏えい
CVE-2011-2153 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249622 5 警告 SmarterTools Inc. - SmarterTools SmarterStats Web サーバにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-2152 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249623 5 警告 SmarterTools Inc. - SmarterTools SmarterStats Web サーバにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-2151 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249624 5 警告 SmarterTools Inc. - SmarterTools SmarterStats Web サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2011-2150 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249625 7.5 危険 SmarterTools Inc. - SmarterTools SmarterStats Web サーバにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-2149 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249626 10 危険 SmarterTools Inc. - SmarterTools SmarterStats Web サーバの Admin/frmSite.aspx における任意コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2011-2148 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249627 3.6 注意 Openswan - Openswan における任意のプロセスを kill される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2147 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249628 5 警告 IBM - IBM Datacap Taskmaster Capture の eDocument Conversion Actions 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-2144 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
249629 6.8 警告 IBM - IBM Datacap Taskmaster Captureにおけるログインのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2143 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
249630 5 警告 IBM - IBM Datacap Taskmaster Capture の Web Client Service における平文のパスワードを要求する脆弱性 CWE-310
暗号の問題
CVE-2011-2142 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200941 9.1 CRITICAL
Network
php
tenable
php
tenable.sc
In PHP versions 7.3.x below 7.3.15 and 7.4.x below 7.4.3, while extracting PHAR files on Windows using phar extension, certain content inside PHAR file could lead to one-byte read past the allocated … CWE-125
Out-of-bounds Read
CVE-2020-7061 2024-11-21 14:36 2020-02-28 Show GitHub Exploit DB Packet Storm
200942 9.1 CRITICAL
Network
openfortivpn_project
fedoraproject
opensuse
openfortivpn
fedora
leap
backports_sle
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonst… CWE-295
Improper Certificate Validation 
CVE-2020-7043 2024-11-21 14:36 2020-02-28 Show GitHub Exploit DB Packet Storm
200943 5.3 MEDIUM
Network
openfortivpn_project
fedoraproject
opensuse
openfortivpn
fedora
leap
backports_sle
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outco… CWE-295
CWE-908
Improper Certificate Validation 
 Use of Uninitialized Resource
CVE-2020-7042 2024-11-21 14:36 2020-02-28 Show GitHub Exploit DB Packet Storm
200944 5.3 MEDIUM
Network
openfortivpn_project
fedoraproject
opensuse
openfortivpn
fedora
leap
backports_sle
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a suc… CWE-295
Improper Certificate Validation 
CVE-2020-7041 2024-11-21 14:36 2020-02-28 Show GitHub Exploit DB Packet Storm
200945 6.5 MEDIUM
Adjacent
zte e8820v3_firmware ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker … NVD-CWE-noinfo
CVE-2020-6864 2024-11-21 14:36 2020-02-28 Show GitHub Exploit DB Packet Storm
200946 6.5 MEDIUM
Adjacent
zte e8820v3_firmware ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified UR… NVD-CWE-noinfo
CVE-2020-6863 2024-11-21 14:36 2020-02-28 Show GitHub Exploit DB Packet Storm
200947 7.2 HIGH
Network
dlink dch-m225_firmware D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name. CWE-78
OS Command 
CVE-2020-6842 2024-11-21 14:36 2020-02-22 Show GitHub Exploit DB Packet Storm
200948 9.8 CRITICAL
Network
dlink dch-m225_firmware D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter. CWE-78
OS Command 
CVE-2020-6841 2024-11-21 14:36 2020-02-22 Show GitHub Exploit DB Packet Storm
200949 7.8 HIGH
Local
honeywell inncom_inncontrol_firmware Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files. CWE-269
 Improper Privilege Management
CVE-2020-6968 2024-11-21 14:36 2020-02-21 Show GitHub Exploit DB Packet Storm
200950 6.8 MEDIUM
Physics
ge vivid_e95_firmware
vivid_e90_firmware
vivid_s70n_firmware
vivid_t8_firmware
vivid_t9_firmware
vivid_iq_firmware
logiq_e10_firmware
logiq_e9_firmware
logiq_s8_firmware
logiq…
A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, res… CWE-20
NVD-CWE-Other
 Improper Input Validation 
CVE-2020-6977 2024-11-21 14:36 2020-02-21 Show GitHub Exploit DB Packet Storm