Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249761 6.8 警告 マカフィー - McAfee SaaS Endpoint Protection の myCIOScn.dll における任意のファイルを書かれる脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3007 2012-03-27 18:43 2011-08-10 Show GitHub Exploit DB Packet Storm
249762 6.8 警告 マカフィー - McAfee の SaaS Endpoint Protection における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3006 2012-03-27 18:43 2011-08-10 Show GitHub Exploit DB Packet Storm
249763 5 警告 Mozilla Foundation - Bugzilla におけるプライベートグループ名の存在を発見される脆弱性 CWE-DesignError
CVE-2011-2979 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249764 5 警告 Mozilla Foundation - Bugzilla における任意のアドレスを変更される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2978 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249765 2.1 注意 Mozilla Foundation - Bugzilla における重要な情報を取得される脆弱性 CWE-DesignError
CVE-2011-2977 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249766 4.3 警告 Mozilla Foundation - Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2976 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249767 6.8 警告 UMN - MapServer の msAddImageSymbol 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2975 2012-03-27 18:43 2011-08-1 Show GitHub Exploit DB Packet Storm
249768 9.3 危険 stunnel - stunnel におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2940 2012-03-27 18:43 2011-08-18 Show GitHub Exploit DB Packet Storm
249769 4.3 警告 Ruby on Rails project - Ruby on Rails の activesupport/lib/active_support/core_ext/string/output_safety.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2932 2012-03-27 18:43 2011-08-29 Show GitHub Exploit DB Packet Storm
249770 4.3 警告 Ruby on Rails project - Ruby on Rails の strip_tags ヘルパーにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2931 2012-03-27 18:43 2011-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214201 6.1 MEDIUM
Network 		apache atlas Apache Atlas before 2.1.0 contain a XSS vulnerability. While saving search or rendering elements values are not sanitized correctly and because of that it triggers the XSS vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-13928 2024-11-21 14:02 2020-09-17 Show GitHub Exploit DB Packet Storm
214202 9.8 CRITICAL
Network 		daemonology bsdiff A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the san… CWE-787
 Out-of-bounds Write 		CVE-2020-14315 2024-11-21 14:02 2020-09-16 Show GitHub Exploit DB Packet Storm
214203 5.5 MEDIUM
Local 		linux
debian
canonical
starwindsoftware 		linux_kernel
debian_linux
ubuntu_linux
starwind_virtual_san 		A memory out-of-bounds read flaw was found in the Linux kernel before 5.9-rc2 with the ext3/ext4 file system, in the way it accesses a directory with broken indexing. This flaw allows a local user to… - CVE-2020-14314 2024-11-21 14:02 2020-09-16 Show GitHub Exploit DB Packet Storm
214204 4.4 MEDIUM
Local 		linux linux_kernel A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the k… - CVE-2020-14304 2024-11-21 14:02 2020-09-16 Show GitHub Exploit DB Packet Storm
214205 9.8 CRITICAL
Network 		mi r3600_firmware In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability. CWE-77
Command Injection 		CVE-2020-14100 2024-11-21 14:02 2020-09-11 Show GitHub Exploit DB Packet Storm
214206 9.8 CRITICAL
Network 		mi xiaomi_ai_speaker_firmware Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-14096 2024-11-21 14:02 2020-09-11 Show GitHub Exploit DB Packet Storm
214207 7.5 HIGH
Network 		bitcoin bitcoin_core Bitcoin Core 0.20.0 allows remote denial of service. NVD-CWE-noinfo
CVE-2020-14198 2024-11-21 14:02 2020-09-11 Show GitHub Exploit DB Packet Storm
214208 5.9 MEDIUM
Network 		apache
oracle
debian 		activemq
flexcube_private_banking
communications_diameter_signaling_router
debian_linux 		Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and ca… CWE-306
Missing Authentication for Critical Function 		CVE-2020-13920 2024-11-21 14:02 2020-09-11 Show GitHub Exploit DB Packet Storm
214209 5.7 MEDIUM
Adjacent 		health covidsafe In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection o… NVD-CWE-noinfo
CVE-2020-14292 2024-11-21 14:02 2020-09-10 Show GitHub Exploit DB Packet Storm
214210 7.2 HIGH
Network 		zohocorp manageengine_applications_manager Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-14008 2024-11-21 14:02 2020-09-5 Show GitHub Exploit DB Packet Storm