Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249681 7.5 危険 Joostina CMS - Joomla! 用 Joostina コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4929 2012-02-28 14:09 2011-10-9 Show GitHub Exploit DB Packet Storm
249682 4.3 警告 PhotoIndochina - Joomla! 用 Restaurant Guide コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4928 2012-02-28 14:07 2011-10-9 Show GitHub Exploit DB Packet Storm
249683 7.5 危険 PhotoIndochina - Joomla! 用 Restaurant Guide コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4927 2012-02-28 13:57 2011-10-9 Show GitHub Exploit DB Packet Storm
249684 7.5 危険 TimeTrack - Joomla! 用 TimeTrack コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4926 2012-02-28 13:53 2011-10-9 Show GitHub Exploit DB Packet Storm
249685 7.5 危険 Nuked-Klan - Nuked-Klan 用 Partenaires モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4925 2012-02-28 13:40 2011-10-9 Show GitHub Exploit DB Packet Storm
249686 7.5 危険 Virtue Netz - Virtue Netz Virtue Book Store における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4923 2012-02-28 13:39 2011-10-9 Show GitHub Exploit DB Packet Storm
249687 7.5 危険 Allinta - Allinta CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4922 2012-02-28 11:20 2011-10-9 Show GitHub Exploit DB Packet Storm
249688 7.5 危険 DMXReady - DMXReady Polling Booth Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4921 2012-02-28 11:18 2011-10-8 Show GitHub Exploit DB Packet Storm
249689 7.5 危険 Micronetsoft - Micronetsoft Rental Property Management Website の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4920 2012-02-28 11:04 2011-10-8 Show GitHub Exploit DB Packet Storm
249690 7.5 危険 Micronetsoft - Micronetsoft RV Dealer Website の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4919 2012-02-28 10:55 2011-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211311 8.8 HIGH
Network 		slack nebula Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun_darwin.go or tun_windows.go. A user can… CWE-22
Path Traversal 		CVE-2020-11498 2024-11-21 13:58 2020-04-3 Show GitHub Exploit DB Packet Storm
211312 4.4 MEDIUM
Local 		linux
opensuse
debian
canonical 		linux_kernel
leap
debian_linux
ubuntu_linux 		An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive infor… CWE-908
CWE-909
 Use of Uninitialized Resource
 Missing Initialization of Resource 		CVE-2020-11494 2024-11-21 13:58 2020-04-3 Show GitHub Exploit DB Packet Storm
211313 4.9 MEDIUM
Network 		zevenet zen_load_balancer Monitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct absolute path traversal attacks, as demonstrated by a filelog=/etc/shadow request to index.cgi. CWE-22
Path Traversal 		CVE-2020-11491 2024-11-21 13:58 2020-04-2 Show GitHub Exploit DB Packet Storm
211314 7.2 HIGH
Network 		zevenet zen_load_balancer Manage::Certificates in Zen Load Balancer 3.10.1 allows remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the index.cgi cert_issuer, cert_division, cert_organiz… CWE-78
OS Command  		CVE-2020-11490 2024-11-21 13:58 2020-04-2 Show GitHub Exploit DB Packet Storm
211315 6.1 MEDIUM
Network 		bell home_hub_3000_firmware An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page. CWE-79
Cross-site Scripting 		CVE-2020-11448 2024-11-21 13:57 2023-11-17 Show GitHub Exploit DB Packet Storm
211316 4.3 MEDIUM
Network 		bell home_hub_3000_firmware An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is … NVD-CWE-noinfo
CVE-2020-11447 2024-11-21 13:57 2023-11-17 Show GitHub Exploit DB Packet Storm
211317 8.2 HIGH
Local 		qualcomm ar8035_firmware
qca6390_firmware
qca6391_firmware
qca6426_firmware
qca6436_firmware
qca8337_firmware
qca9984_firmware
qcm2290_firmware
qcm4290_firmware
qcs2290_firmware
… 		An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-11263 2024-11-21 13:57 2022-01-3 Show GitHub Exploit DB Packet Storm
211318 8.6 HIGH
Network 		qualcomm apq8009_firmware
apq8053_firmware
apq8064au_firmware
apq8076_firmware
apq8092_firmware
apq8094_firmware
apq8096au_firmware
ar8031_firmware
csr6030_firmware
csra6620_firmwar… 		Accepting AMSDU frames with mismatched destination and source address can lead to information disclosure in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sna… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-11303 2024-11-21 13:57 2021-10-20 Show GitHub Exploit DB Packet Storm
211319 9.8 CRITICAL
Network 		qualcomm apq8053_firmware
apq8064au_firmware
apq8096au_firmware
aqt1000_firmware
ar8031_firmware
ar8035_firmware
csra6620_firmware
csra6640_firmware
csrb31024_firmware
mdm9650_firmw… 		Improper authentication of Non-EAPOL/WAPI plaintext frames during four-way handshake can lead to arbitrary network packet injection in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… CWE-287
Improper Authentication 		CVE-2020-11264 2024-11-21 13:57 2021-09-8 Show GitHub Exploit DB Packet Storm
211320 7.5 HIGH
Network 		qualcomm apq8009_firmware
apq8017_firmware
apq8053_firmware
apq8064au_firmware
apq8096au_firmware
aqt1000_firmware
ar7420_firmware
ar8031_firmware
ar8035_firmware
ar9380_firmware 		Improper authentication of un-encrypted plaintext Wi-Fi frames in an encrypted network can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… CWE-287
Improper Authentication 		CVE-2020-11301 2024-11-21 13:57 2021-09-8 Show GitHub Exploit DB Packet Storm