Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249861 3.5 注意 Liferay
Apache Software Foundation
オラクル		 - Liferay Portal CE の XSL Content portlet における任意の XSL および XML ファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-1503 2012-03-27 18:43 2010-11-9 Show GitHub Exploit DB Packet Storm
249862 7.5 危険 PHPNUKE - Francisco Burzi PHP-Nuke の admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-1480 2012-03-27 18:43 2011-06-20 Show GitHub Exploit DB Packet Storm
249863 7.2 危険 ノキア - Nokia E75 携帯端末におけるデバイスロックコード回避の脆弱性 CWE-287
不適切な認証 		CVE-2011-1472 2012-03-27 18:43 2011-03-29 Show GitHub Exploit DB Packet Storm
249864 4.3 警告 The PHP Group - PHP の strval 関数におけるバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1464 2012-03-27 18:43 2011-03-19 Show GitHub Exploit DB Packet Storm
249865 5 警告 OTRS プロジェクト - OTRS の AgentInterface または CustomerInterface コンポーネントにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2011-1433 2012-03-27 18:43 2011-03-18 Show GitHub Exploit DB Packet Storm
249866 6.8 警告 SCO - SCO SCOoffice Server の STARTTLS 実装における SMTP セッションにコマンドを挿入される脆弱性 CWE-Other
その他 		CVE-2011-1432 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
249867 6.8 警告 frederik vermeulen - netqmail の qmail-smtpd の STARTTLS の実装における暗号化された SMTP セッションへコマンドを挿入される脆弱性 CWE-Other
その他 		CVE-2011-1431 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
249868 6.8 警告 Ipswitch, Inc. - Ipswitch IMail のSTARTTLS 実装における暗号化された SMTP セッションにコマンドを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1430 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
249869 5.8 警告 FlashTux - Chat の Wee Enhanced Environment における SSL chat サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1428 2012-03-27 18:43 2011-03-16 Show GitHub Exploit DB Packet Storm
249870 4.3 警告 Kodak - Kodak InSite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1427 2012-03-27 18:43 2011-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214141 7.8 HIGH
Local 		microweber microweber Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User scr… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-13241 2024-11-21 14:00 2020-05-21 Show GitHub Exploit DB Packet Storm
214142 7.5 HIGH
Network 		gitea gitea An issue was discovered in Gitea through 1.11.5. An attacker can trigger a deadlock by initiating a transfer of a repository's ownership from one organization to another. CWE-667
 Improper Locking 		CVE-2020-13246 2024-11-21 14:00 2020-05-21 Show GitHub Exploit DB Packet Storm
214143 5.4 MEDIUM
Network 		dolibarr dolibarr_erp\/crm The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mec… CWE-668
CWE-276
 Exposure of Resource to Wrong Sphere
Incorrect Default Permissions  		CVE-2020-13240 2024-11-21 14:00 2020-05-21 Show GitHub Exploit DB Packet Storm
214144 5.4 MEDIUM
Network 		dolibarr dolibarr_erp\/crm The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS. CWE-79
Cross-site Scripting 		CVE-2020-13239 2024-11-21 14:00 2020-05-21 Show GitHub Exploit DB Packet Storm
214145 6.5 MEDIUM
Network 		cacti
fedoraproject 		cacti
fedora 		In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change. CWE-352
 Origin Validation Error 		CVE-2020-13231 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
214146 4.3 MEDIUM
Network 		cacti
debian
fedoraproject 		cacti
debian_linux
fedora 		In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs). CWE-281
 Improper Preservation of Permissions 		CVE-2020-13230 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
214147 5.5 MEDIUM
Local 		kde amarok A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time,… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-13152 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
214148 9.8 CRITICAL
Network 		smartbear readyapi An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into th… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-12835 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
214149 9.8 CRITICAL
Network 		wso2 api_manager WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-13226 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
214150 4.8 MEDIUM
Network 		phpipam phpipam phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget. CWE-79
Cross-site Scripting 		CVE-2020-13225 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm