Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249761 5 警告 Novell - Novell Data Synchronizer の WebAdmin におけるアクセス権を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-3013 2012-03-27 18:43 2011-07-26 Show GitHub Exploit DB Packet Storm
249762 10 危険 ioquake3
worldofpadman
urbanterror
tremulous		 - World of Padman などの製品で使用される ioQuake3 エンジンにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3012 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249763 5 警告 Ruby-lang.org - Ruby における乱数の値を推測される脆弱性 CWE-310
暗号の問題 		CVE-2011-3009 2012-03-27 18:43 2011-08-5 Show GitHub Exploit DB Packet Storm
249764 6.8 警告 マカフィー - McAfee SaaS Endpoint Protection の myCIOScn.dll における任意のファイルを書かれる脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3007 2012-03-27 18:43 2011-08-10 Show GitHub Exploit DB Packet Storm
249765 6.8 警告 マカフィー - McAfee の SaaS Endpoint Protection における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3006 2012-03-27 18:43 2011-08-10 Show GitHub Exploit DB Packet Storm
249766 5 警告 Mozilla Foundation - Bugzilla におけるプライベートグループ名の存在を発見される脆弱性 CWE-DesignError
CVE-2011-2979 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249767 5 警告 Mozilla Foundation - Bugzilla における任意のアドレスを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2978 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249768 2.1 注意 Mozilla Foundation - Bugzilla における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2011-2977 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249769 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2976 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249770 6.8 警告 UMN - MapServer の msAddImageSymbol 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2975 2012-03-27 18:43 2011-08-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201391 6.1 MEDIUM
Network 		markdown-it-highlightjs_project markdown-it-highlightjs This affects the package markdown-it-highlightjs before 3.3.1. It is possible insert malicious JavaScript as a value of lang in the markdown-it-highlightjs Inline code highlighting feature. const mar… CWE-79
Cross-site Scripting 		CVE-2020-7773 2024-11-21 14:37 2020-11-16 Show GitHub Exploit DB Packet Storm
201392 5.3 MEDIUM
Network 		google firebase\/util This affects the package @firebase/util before 0.3.4. This vulnerability relates to the deepExtend function within the DeepCopy.ts file. Depending on if user input is provided, an attacker can overwr… NVD-CWE-noinfo
CVE-2020-7765 2024-11-21 14:37 2020-11-16 Show GitHub Exploit DB Packet Storm
201393 9.8 CRITICAL
Network 		doc-path_project doc-path This affects the package doc-path before 2.1.2. NVD-CWE-noinfo
CVE-2020-7772 2024-11-21 14:37 2020-11-16 Show GitHub Exploit DB Packet Storm
201394 9.8 CRITICAL
Network 		sugarcrm sugarcrm An authorization bypass and PHP local-file-include vulnerability in the installation component of SugarCRM before 8.0, 8.0 before 8.0.7, 9.0 before 9.0.4, and 10.0 before 10.0.0 allows for unauthenti… CWE-94
CWE-20
Code Injection
 Improper Input Validation  		CVE-2020-7472 2024-11-21 14:37 2020-11-13 Show GitHub Exploit DB Packet Storm
201395 9.8 CRITICAL
Network 		json8_project json8 This affects the package json8 before 1.0.3. The function adds in the target object the property specified in the path, however it does not properly check the key being set, leading to a prototype po… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7770 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
201396 4.8 MEDIUM
Network 		mcafee endpoint_security Cross site scripting vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows administrators to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting 		CVE-2020-7333 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
201397 8.8 HIGH
Network 		mcafee endpoint_security Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows an attacker to execute arbitrary HTML code due to … CWE-352
 Origin Validation Error 		CVE-2020-7332 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
201398 7.8 HIGH
Local 		mcafee endpoint_security Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local users to cause a denial of service and malicious file execution via carefully craf… CWE-428
 Unquoted Search Path or Element 		CVE-2020-7331 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
201399 9.8 CRITICAL
Network 		nodemailer nodemailer This affects the package nodemailer before 6.4.16. Use of crafted recipient email addresses may result in arbitrary command flag injection in sendmail transport for sending mails. CWE-88
Argument Injection 		CVE-2020-7769 2024-11-21 14:37 2020-11-12 Show GitHub Exploit DB Packet Storm
201400 9.8 CRITICAL
Network 		grpc grpc The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7768 2024-11-21 14:37 2020-11-11 Show GitHub Exploit DB Packet Storm