Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249801	7.5	危険	parodia	-	Parodia における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-2751	2012-03-27 18:43	2011-07-17	Show	GitHub Exploit DB Packet Storm

249802	5	警告	Novell	-	Novell File Reporter の NFRAgent.exe における任意のファイルを削除される脆弱性	CWE-399 リソース管理の問題	CVE-2011-2750	2012-03-27 18:43	2011-07-17	Show	GitHub Exploit DB Packet Storm

249803	4	警告	OTRS プロジェクト	-	OTRS の OTRS-Core の Kernel/Modules/AdminPackageManager.pm における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2011-2746	2012-03-27 18:43	2011-08-29	Show	GitHub Exploit DB Packet Storm

249804	6.5	警告	Chyrp	-	Chyrp の upload_handler.php における .php ファイルをアップロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2745	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249805	6.8	警告	Chyrp	-	Chyrp におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2744	2012-03-27 18:43	2011-07-19	Show	GitHub Exploit DB Packet Storm

249806	4.3	警告	Chyrp	-	Chyrp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2743	2012-03-27 18:43	2011-07-19	Show	GitHub Exploit DB Packet Storm

249807	5	警告	RSAセキュリティ	-	RSA enVision における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-2737	2012-03-27 18:43	2011-08-25	Show	GitHub Exploit DB Packet Storm

249808	5	警告	RSAセキュリティ	-	RSA enVision の Task Escalation における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-2736	2012-03-27 18:43	2011-08-25	Show	GitHub Exploit DB Packet Storm

249809	7.9	危険	DELL EMC (旧 EMC Corporation)	-	EMC AutoStart におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2735	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249810	7.5	危険	DELL EMC (旧 EMC Corporation)	-	EMC RSA AAOP におけるアクセス制限を回避する脆弱性	CWE-287 不適切な認証	CVE-2011-2733	2012-03-27 18:43	2011-08-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214171	5.9	MEDIUM Network	openbsd netapp	openssh aff_a700s_firmware steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility active_iq_unified_manager solidfire hci_management_node hci_storage_node…	The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connect…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-14145	2024-11-21 14:02	2020-06-30	Show	GitHub Exploit DB Packet Storm

214172	9.8	CRITICAL Network	mk-auth	mk-auth	An issue was discovered in MK-AUTH 19.01. It allows command execution as root via shell metacharacters to /auth admin scripts.	CWE-78 OS Command	CVE-2020-14072	2024-11-21 14:02	2020-06-30	Show	GitHub Exploit DB Packet Storm

214173	6.1	MEDIUM Network	mk-auth	mk-auth	An issue was discovered in MK-AUTH 19.01. XSS vulnerabilities in admin and client scripts allow an attacker to execute arbitrary JavaScript code.	CWE-79 Cross-site Scripting	CVE-2020-14071	2024-11-21 14:02	2020-06-30	Show	GitHub Exploit DB Packet Storm

214174	9.8	CRITICAL Network	mk-auth	mk-auth	An issue was discovered in MK-AUTH 19.01. There is authentication bypass in the web login functionality because guessable credentials to admin/executar_login.php result in admin access.	CWE-287 Improper Authentication	CVE-2020-14070	2024-11-21 14:02	2020-06-30	Show	GitHub Exploit DB Packet Storm

214175	6.8	MEDIUM Physics	mk-auth	mk-auth	An issue was discovered in MK-AUTH 19.01. There are SQL injection issues in mkt/ PHP scripts, as demonstrated by arp.php, dhcp.php, hotspot.php, ip.php, pgaviso.php, pgcorte.php, pppoe.php, queues.ph…	CWE-89 SQL Injection	CVE-2020-14069	2024-11-21 14:02	2020-06-30	Show	GitHub Exploit DB Packet Storm

214176	9.8	CRITICAL Network	mk-auth	mk-auth	An issue was discovered in MK-AUTH 19.01. The web login functionality allows an attacker to bypass authentication and gain client privileges via SQL injection in central/executar_login.php.	CWE-89 SQL Injection	CVE-2020-14068	2024-11-21 14:02	2020-06-30	Show	GitHub Exploit DB Packet Storm

214177	7.5	HIGH Network	mattermost	mattermost	An issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. Unintended third-party servers could sometimes obtain authorization tokens, aka MMSA-2020-0022.	NVD-CWE-noinfo	CVE-2020-13891	2024-11-21 14:02	2020-06-27	Show	GitHub Exploit DB Packet Storm

214178	9.8	CRITICAL Network	mi	xiaomi_r3600_firmware	In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to a stack overflow or remote code execution.	CWE-787 Out-of-bounds Write	CVE-2020-14095	2024-11-21 14:02	2020-06-25	Show	GitHub Exploit DB Packet Storm

214179	9.8	CRITICAL Network	mi	xiaomi_r3600_firmware	In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution.	CWE-787 Out-of-bounds Write	CVE-2020-14094	2024-11-21 14:02	2020-06-25	Show	GitHub Exploit DB Packet Storm

214180	6.1	MEDIUM Network	naviwebs	navigate_cms	An issue was discovered in Navigate CMS 2.9 r1433. There is a stored XSS vulnerability that is executed on the page to view users, and on the page to edit users. This is present in both the User fiel…	CWE-79 Cross-site Scripting	CVE-2020-14018	2024-11-21 14:02	2020-06-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed