Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249691 7.8 危険 マイクロソフト - Microsoft Silverlight 4 におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1844 2012-03-27 18:43 2011-05-3 Show GitHub Exploit DB Packet Storm
249692 6.8 警告 banu - Tinyproxy の conf.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1843 2012-03-27 18:43 2011-05-2 Show GitHub Exploit DB Packet Storm
249693 7.2 危険 Canonical - language-selector の D-Bus バックエンドにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1842 2012-03-27 18:43 2011-05-2 Show GitHub Exploit DB Packet Storm
249694 4.3 警告 mojolicious - Mojolicious の link_to ヘルパーにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1841 2012-03-27 18:43 2011-05-2 Show GitHub Exploit DB Packet Storm
249695 2.1 注意 martinicreations - Android の MartiniCreations PassmanLite Password Manager アプリケーションにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-1840 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
249696 4.3 警告 TWiki - TWiki の TemplateLogin.pm におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1838 2012-03-27 18:43 2011-05-20 Show GitHub Exploit DB Packet Storm
249697 4.3 警告 Debian - APT における変更されたパッケージをインストールされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1829 2012-03-27 18:43 2011-07-26 Show GitHub Exploit DB Packet Storm
249698 2.1 注意 Evan Dandrea - usb-creator の usb-creator-helper における任意のアンマウント操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1828 2012-03-27 18:43 2011-05-16 Show GitHub Exploit DB Packet Storm
249699 5.8 警告 CA Technologies - CA Arcot WebFort VAS の 管理コンソールにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1826 2012-03-27 18:43 2011-04-26 Show GitHub Exploit DB Packet Storm
249700 4.3 警告 CA Technologies - CA Arcot WebFort VAS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1825 2012-03-27 18:43 2011-04-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209901 9.8 CRITICAL
Network 		apache
debian 		shiro
debian_linux 		Apache Shiro before 1.5.2, when using Apache Shiro with Spring dynamic controllers, a specially crafted request may cause an authentication bypass. NVD-CWE-noinfo
CVE-2020-1957 2024-11-21 14:11 2020-03-26 Show GitHub Exploit DB Packet Storm
209902 9.8 CRITICAL
Network 		pyyaml
fedoraproject
opensuse
oracle 		pyyaml
fedora
leap
communications_cloud_native_core_network_function_cloud_native_environment 		A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method … - CVE-2020-1747 2024-11-21 14:11 2020-03-25 Show GitHub Exploit DB Packet Storm
209903 5.6 MEDIUM
Network 		redhat keycloak A flaw was found in keycloak before version 9.0.1. When configuring an Conditional OTP Authentication Flow as a post login flow of an IDP, the failure login events for OTP are not being sent to the b… CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-1744 2024-11-21 14:11 2020-03-24 Show GitHub Exploit DB Packet Storm
209904 9.8 CRITICAL
Network 		apache
debian 		traffic_server
debian_linux 		There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and Transfer-Encoding and Content length headers. Upgrade to versions 7.1.… CWE-444
HTTP Request Smuggling 		CVE-2020-1944 2024-11-21 14:11 2020-03-24 Show GitHub Exploit DB Packet Storm
209905 5.5 MEDIUM
Local 		apache
oracle
debian
canonical 		tika
flexcube_private_banking
debian_linux
business_process_management_suite
ubuntu_linux
communications_messaging_server 		A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-1951 2024-11-21 14:11 2020-03-23 Show GitHub Exploit DB Packet Storm
209906 5.5 MEDIUM
Local 		apache
oracle
debian
canonical 		tika
flexcube_private_banking
debian_linux
business_process_management_suite
ubuntu_linux
communications_messaging_server 		A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-1950 2024-11-21 14:11 2020-03-23 Show GitHub Exploit DB Packet Storm
209907 5.5 MEDIUM
Local 		huawei oxfords-an00a_firmware Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to tar… CWE-287
Improper Authentication 		CVE-2020-1878 2024-11-21 14:11 2020-03-21 Show GitHub Exploit DB Packet Storm
209908 3.9 LOW
Physics 		huawei hege-560_firmware
hege-570_firmware
osca-550_firmware
osca-550a_firmware
osca-550ax_firmware
osca-550x_firmware 		There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to … CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-1879 2024-11-21 14:11 2020-03-21 Show GitHub Exploit DB Packet Storm
209909 8.1 HIGH
Network 		huawei secospace_antiddos8000_firmware Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affecte… CWE-287
Improper Authentication 		CVE-2020-1864 2024-11-21 14:11 2020-03-21 Show GitHub Exploit DB Packet Storm
209910 3.3 LOW
Local 		huawei campusinsight
manageone 		There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful ex… CWE-415
 Double Free 		CVE-2020-1862 2024-11-21 14:11 2020-03-21 Show GitHub Exploit DB Packet Storm