Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249801 4.3 警告 アップル
Mozilla Foundation
マイクロソフト
- Bugzilla におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2379 2012-03-27 18:43 2011-08-9 Show GitHub Exploit DB Packet Storm
249802 10 危険 ヒューレット・パッカード - HP IMC の img.exe における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-2331 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
249803 9 危険 IBM - IBM Tivoli Management Framework の Tivoli Endpoint における禁止されたページにリクエストを送信する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2330 2012-03-27 18:43 2011-05-30 Show GitHub Exploit DB Packet Storm
249804 6.5 警告 Apache Software Foundation - Apache Rampart の rampart_timestamp_token_validate 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2329 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
249805 4.3 警告 Novell
marcus schafer
- SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2226 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249806 9.3 危険 Novell
marcus schafer
- SUSE Studio で使用される Kiwi における脆弱性 CWE-noinfo
情報不足
CVE-2011-2225 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
249807 4.3 警告 Novell - Novell Data Synchronizer の Mobility Pack におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2224 2012-03-27 18:43 2011-07-26 Show GitHub Exploit DB Packet Storm
249808 5 警告 Novell - Novell Data Synchronizer の Mobility Pack における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2011-2223 2012-03-27 18:43 2011-07-26 Show GitHub Exploit DB Packet Storm
249809 4.3 警告 Novell - WebAdmin における Web セッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2011-2222 2012-03-27 18:43 2011-07-26 Show GitHub Exploit DB Packet Storm
249810 5 警告 Novell - Novell Data Synchronizer の Mobility Pack におけるWebAdmin 認証を回避する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2221 2012-03-27 18:43 2011-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200881 8.8 HIGH
Network
mozilla
canonical
firefox_esr
thunderbird
firefox
ubuntu_linux
When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbi… CWE-416
 Use After Free
CVE-2020-6805 2024-11-21 14:36 2020-03-26 Show GitHub Exploit DB Packet Storm
200882 6.1 MEDIUM
Network
mozilla
fedoraproject
bleach
fedora
In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False. CWE-79
Cross-site Scripting
CVE-2020-6816 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200883 6.1 MEDIUM
Network
mozilla
fedoraproject
bleach
fedora
In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option. CWE-79
Cross-site Scripting
CVE-2020-6802 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200884 9.8 CRITICAL
Network
moxa eds-g516e_firmware
eds-510e_firmware
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service. CWE-787
 Out-of-bounds Write
CVE-2020-7007 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200885 7.5 HIGH
Network
moxa eds-g516e_firmware
eds-510e_firmware
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-7001 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200886 7.5 HIGH
Network
moxa eds-g516e_firmware
eds-510e_firmware
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-6997 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200887 9.8 CRITICAL
Network
moxa eds-g516e_firmware
eds-510e_firmware
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. CWE-521
Weak Password Requirements 
CVE-2020-6991 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200888 8.8 HIGH
Adjacent
honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution. CWE-74
Injection
CVE-2020-6982 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200889 9.8 CRITICAL
Network
moxa eds-g516e_firmware
eds-510e_firmware
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. CWE-798
 Use of Hard-coded Credentials
CVE-2020-6981 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
200890 7.5 HIGH
Network
moxa eds-g516e_firmware
eds-510e_firmware
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered. CWE-798
 Use of Hard-coded Credentials
CVE-2020-6979 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm