Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249671	4.3	警告	MediaWiki	-	MediaWiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0047	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

249672	6.8	警告	Mozilla Foundation	-	Bugzilla におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0046	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

249673	6.8	警告	レッドハット	-	IcedTea における信頼できるソースからコードを実行するように見せかけることが出来る脆弱性	CWE-20 不適切な入力確認	CVE-2011-0025	2012-03-27 18:42	2011-02-4	Show	GitHub Exploit DB Packet Storm

249674	4.7	警告	Fedora Project レッドハット	-	389 Directory Server の setup スクリプトにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0022	2012-03-27 18:42	2011-02-23	Show	GitHub Exploit DB Packet Storm

249675	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の cdg.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0021	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

249676	7.5	危険	Fedora Project レッドハット	-	389 Directory Server の slapd におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0019	2012-03-27 18:42	2011-02-22	Show	GitHub Exploit DB Packet Storm

249677	9	危険	OpenVAS	-	OpenVAS Manager の email 関数における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0018	2012-03-27 18:42	2011-01-18	Show	GitHub Exploit DB Packet Storm

249678	2.1	注意	The Tor Project	-	Tor における重要な情報を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2011-0016	2012-03-27 18:42	2011-01-17	Show	GitHub Exploit DB Packet Storm

249679	5	警告	The Tor Project	-	Tor におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0015	2012-03-27 18:42	2011-01-17	Show	GitHub Exploit DB Packet Storm

249680	4.3	警告	Best Practical Solutions	-	Best Practical Solutions RT における平分パスワードを判定される脆弱性	CWE-310 暗号の問題	CVE-2011-0009	2012-03-27 18:42	2011-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210561	9.8	CRITICAL Network	nexos_project	nexos	The Nexos theme through 1.7 for WordPress allows side-map/?search_order= SQL Injection.	CWE-89 SQL Injection	CVE-2020-15363	2024-11-21 14:05	2020-06-28	Show	GitHub Exploit DB Packet Storm

210562	7.8	HIGH Local	docker	docker_desktop	com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.	CWE-862 Missing Authorization	CVE-2020-15360	2024-11-21 14:05	2020-06-27	Show	GitHub Exploit DB Packet Storm

210563	5.5	MEDIUM Local	sqlite canonical apple oracle siemens	sqlite ubuntu_linux iphone_os watchos icloud tvos ipados macos outside_in_technology hyperion_infrastructure_technology enterprise_manager_ops_center communications_n…	In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.	CWE-787 Out-of-bounds Write	CVE-2020-15358	2024-11-21 14:05	2020-06-27	Show	GitHub Exploit DB Packet Storm

210564	7.8	HIGH Local	idrive	idrive	IDrive before 6.7.3.19 on Windows installs by default to %PROGRAMFILES(X86)%\IDriveWindows with weak folder permissions granting any user modify permission (i.e., NT AUTHORITY\Authenticated Users:(OI…	CWE-276 Incorrect Default Permissions	CVE-2020-15351	2024-11-21 14:05	2020-06-27	Show	GitHub Exploit DB Packet Storm

210565	7.5	HIGH Network	zyxel	cloudcnm_secumanager	Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /cnr requests.	CWE-306 Missing Authentication for Critical Function	CVE-2020-15336	2024-11-21 14:05	2020-06-27	Show	GitHub Exploit DB Packet Storm

210566	7.5	HIGH Network	zyxel	cloudcnm_secumanager	Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 has no authentication for /registerCpe requests.	CWE-306 Missing Authentication for Critical Function	CVE-2020-15335	2024-11-21 14:05	2020-06-27	Show	GitHub Exploit DB Packet Storm

210567	9.8	CRITICAL Network	zyxel	cloud_cnm_secumanager	Zyxel CloudCNM SecuManager 3.1.0 and 3.1.1 allows use of live/CPEManager/AXCampaignManager/delete_cpes_by_ids?cpe_ids= for eval injection of Python code.	CWE-94 Code Injection	CVE-2020-15348	2024-11-21 14:05	2020-06-26	Show	GitHub Exploit DB Packet Storm

210568	7.2	HIGH Network	turnkeylinux	support_incident_tracker	Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 allows post-authentication SQL injection via the site_edit.php typeid or site parameter, the search_incidents_advanced.php search_title parame…	CWE-89 SQL Injection	CVE-2020-15308	2024-11-21 14:05	2020-06-26	Show	GitHub Exploit DB Packet Storm

210569	5.5	MEDIUM Local	openexr fedoraproject opensuse debian canonical	openexr fedora leap debian_linux ubuntu_linux	An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp.	CWE-787 Out-of-bounds Write	CVE-2020-15306	2024-11-21 14:05	2020-06-26	Show	GitHub Exploit DB Packet Storm

210570	5.5	MEDIUM Local	openexr fedoraproject opensuse debian canonical	openexr fedora leap debian_linux ubuntu_linux	An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp.	CWE-416 Use After Free	CVE-2020-15305	2024-11-21 14:05	2020-06-26	Show	GitHub Exploit DB Packet Storm