Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249621 10 危険 General Electric Company - GE Intelligent Platforms Proficy Historian におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1918 2012-02-3 16:54 2011-11-2 Show GitHub Exploit DB Packet Storm
249622 5 警告 Cogent Real-Time Systems Inc. - Cogent DataHub の Web サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3500 2012-02-3 16:51 2011-09-16 Show GitHub Exploit DB Packet Storm
249623 10 危険 Cogent Real-Time Systems Inc. - Cogent DataHub の DH_OneSecondTick 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3493 2012-02-3 16:49 2011-09-16 Show GitHub Exploit DB Packet Storm
249624 5 警告 Beckhoff Automation - Beckhoff TwinCAT におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3486 2012-02-3 16:47 2011-09-16 Show GitHub Exploit DB Packet Storm
249625 7.5 危険 Novell - Novell Open Enterprise Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4194 2012-02-3 16:38 2012-01-31 Show GitHub Exploit DB Packet Storm
249626 6.8 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum Content Server におけるスーパーユーザの最高権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4144 2012-02-3 16:37 2012-02-2 Show GitHub Exploit DB Packet Storm
249627 6.4 警告 The PHP Group - PHP における任意のファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0057 2012-02-3 16:34 2011-04-1 Show GitHub Exploit DB Packet Storm
249628 9.3 危険 ヒューレット・パッカード - HP Network Automation における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-4790 2012-02-3 16:30 2012-01-30 Show GitHub Exploit DB Packet Storm
249629 2.1 注意 Mozilla Foundation - Mozilla Firefox および SeaMonkey における Firefox Sync キーを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0450 2012-02-3 16:29 2012-01-31 Show GitHub Exploit DB Packet Storm
249630 5 警告 Mozilla Foundation - 複数の Mozilla 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-3670 2012-02-3 16:22 2012-01-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211671 8.8 HIGH
Network 		vestacp vesta_control_panel Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demon… CWE-78
OS Command  		CVE-2020-10808 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
211672 5.3 MEDIUM
Network 		mitre caldera auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header. CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-10807 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
211673 9.8 CRITICAL
Network 		ez ez_publish-kernel
ez_publish-legacy 		eZ Publish Kernel before 5.4.14.1, 6.x before 6.13.6.2, and 7.x before 7.5.6.2 and eZ Publish Legacy before 5.4.14.1, 2017 before 2017.12.7.2, and 2019 before 2019.03.4.2 allow remote attackers to ex… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-10806 2024-11-21 13:56 2020-03-23 Show GitHub Exploit DB Packet Storm
211674 5.4 MEDIUM
Network 		phpmyadmin
debian
fedoraproject
opensuse
suse 		phpmyadmin
debian_linux
fedora
leap
backports_sle
package_hub 		In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results… CWE-79
CWE-89
Cross-site Scripting
SQL Injection 		CVE-2020-10803 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm
211675 8.0 HIGH
Network 		phpmyadmin
debian
fedoraproject
opensuse
suse 		phpmyadmin
debian_linux
fedora
leap
backports_sle
package_hub 		In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability has been discovered where certain parameters are not properly escaped when generating certain queries for search act… CWE-89
SQL Injection 		CVE-2020-10802 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm
211676 8.0 HIGH
Network 		phpmyadmin
fedoraproject
opensuse
suse 		phpmyadmin
fedora
leap
backports_sle
package_hub 		In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was found in retrieval of the current username (in libraries/classes/Server/Privileges.php and libraries/classes/Use… CWE-89
SQL Injection 		CVE-2020-10804 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm
211677 8.1 HIGH
Network 		lix_project lix lix through 15.8.7 allows man-in-the-middle attackers to execute arbitrary code by modifying the HTTP client-server data stream so that the Location header is associated with attacker-controlled exec… NVD-CWE-noinfo
CVE-2020-10800 2024-11-21 13:56 2020-03-22 Show GitHub Exploit DB Packet Storm
211678 9.8 CRITICAL
Network 		svglib_project svglib The svglib package through 0.9.3 for Python allows XXE attacks via an svg2rlg call. CWE-611
XXE 		CVE-2020-10799 2024-11-21 13:56 2020-03-21 Show GitHub Exploit DB Packet Storm
211679 7.5 HIGH
Network 		it-novum openitcockpit openITCOCKPIT through 3.7.2 allows remote attackers to configure the self::DEVELOPMENT or self::STAGING option by placing a hostname containing "dev" or "staging" in the HTTP Host header. CWE-276
Incorrect Default Permissions  		CVE-2020-10792 2024-11-21 13:56 2020-03-21 Show GitHub Exploit DB Packet Storm
211680 8.8 HIGH
Network 		suse rancher In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project. CWE-863
 Incorrect Authorization 		CVE-2020-10676 2024-11-21 13:55 2023-12-13 Show GitHub Exploit DB Packet Storm