Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249911	4.3	警告	アップル Mozilla Foundation マイクロソフト	-	Bugzilla におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2379	2012-03-27 18:43	2011-08-9	Show	GitHub Exploit DB Packet Storm

249912	10	危険	ヒューレット・パッカード	-	HP IMC の img.exe における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2331	2012-03-27 18:43	2011-06-2	Show	GitHub Exploit DB Packet Storm

249913	9	危険	IBM	-	IBM Tivoli Management Framework の Tivoli Endpoint における禁止されたページにリクエストを送信する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2330	2012-03-27 18:43	2011-05-30	Show	GitHub Exploit DB Packet Storm

249914	6.5	警告	Apache Software Foundation	-	Apache Rampart の rampart_timestamp_token_validate 関数におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2329	2012-03-27 18:43	2011-06-2	Show	GitHub Exploit DB Packet Storm

249915	4.3	警告	Novell marcus schafer	-	SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2226	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249916	9.3	危険	Novell marcus schafer	-	SUSE Studio で使用される Kiwi における脆弱性	CWE-noinfo 情報不足	CVE-2011-2225	2012-03-27 18:43	2011-08-23	Show	GitHub Exploit DB Packet Storm

249917	4.3	警告	Novell	-	Novell Data Synchronizer の Mobility Pack におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2224	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249918	5	警告	Novell	-	Novell Data Synchronizer の Mobility Pack における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2011-2223	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249919	4.3	警告	Novell	-	WebAdmin における Web セッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2011-2222	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

249920	5	警告	Novell	-	Novell Data Synchronizer の Mobility Pack におけるWebAdmin 認証を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2221	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214241	7.5	HIGH Network	ruckuswireless	unleashed_firmware	Insecure permissions in emfd/libemf in Ruckus Wireless Unleashed through 200.7.10.102.92 allow a remote attacker to overwrite admin credentials via an unauthenticated crafted HTTP request. This affec…	CWE-522 CWE-732 Insufficiently Protected Credentials Incorrect Permission Assignment for Critical Resource	CVE-2020-13915	2024-11-21 14:02	2020-07-29	Show	GitHub Exploit DB Packet Storm

214242	7.5	HIGH Network	ruckuswireless	unleashed_firmware	webs in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to cause a denial of service (Segmentation fault) to the webserver via an unauthenticated crafted HTTP request. This…	NVD-CWE-noinfo	CVE-2020-13914	2024-11-21 14:02	2020-07-29	Show	GitHub Exploit DB Packet Storm

214243	6.1	MEDIUM Network	ruckuswireless	unleashed_firmware	An XSS issue in emfd in Ruckus Wireless Unleashed through 200.7.10.102.92 allows a remote attacker to execute JavaScript code via an unauthenticated crafted HTTP request. This affects C110, E510, H32…	CWE-79 Cross-site Scripting	CVE-2020-13913	2024-11-21 14:02	2020-07-29	Show	GitHub Exploit DB Packet Storm

214244	6.5	MEDIUM Network	redhat	jboss_fuse single_sign-on openshift_application_runtimes jboss_enterprise_application_platform_continuous_delivery amq	A vulnerability was found in Wildfly's Enterprise Java Beans (EJB) versions shipped with Red Hat JBoss EAP 7, where SessionOpenInvocations are never removed from the remote InvocationTracker after a …	-	CVE-2020-14307	2024-11-21 14:02	2020-07-25	Show	GitHub Exploit DB Packet Storm

214245	6.5	MEDIUM Network	redhat	jboss_fuse single_sign-on openshift_application_runtimes jboss_enterprise_application_platform_continuous_delivery amq jboss-ejb-client	A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down an…	-	CVE-2020-14297	2024-11-21 14:02	2020-07-25	Show	GitHub Exploit DB Packet Storm

214246	5.4	MEDIUM Network	atlassian	confluence_server confluence_data_center	Affected versions of Atlassian Confluence Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in user macro parameters.…	CWE-79 Cross-site Scripting	CVE-2020-14175	2024-11-21 14:02	2020-07-24	Show	GitHub Exploit DB Packet Storm

214247	6.1	MEDIUM Network	tc_custom_javascript_project	tc_custom_javascript	A stored Cross-Site Scripting (XSS) vulnerability in the TC Custom JavaScript plugin before 1.2.2 for WordPress allows unauthenticated remote attackers to inject arbitrary JavaScript via the tccj-con…	CWE-79 Cross-site Scripting	CVE-2020-14063	2024-11-21 14:02	2020-07-22	Show	GitHub Exploit DB Packet Storm

214248	6.1	MEDIUM Network	apache	activemq_artemis	In Apache ActiveMQ Artemis 2.5.0 to 2.13.0, a specially crafted MQTT packet which has an XSS payload as client-id or topic name can exploit this vulnerability. The XSS payload is being injected into …	CWE-79 Cross-site Scripting	CVE-2020-13932	2024-11-21 14:02	2020-07-21	Show	GitHub Exploit DB Packet Storm

214249	5.3	MEDIUM Network	golang opensuse	go leap	In Go before 1.13.13 and 1.14.x before 1.14.5, Certificate.Verify may lack a check on the VerifyOptions.KeyUsages EKU requirements (if VerifyOptions.Roots equals nil and the installation is on Window…	CWE-295 Improper Certificate Validation	CVE-2020-14039	2024-11-21 14:02	2020-07-18	Show	GitHub Exploit DB Packet Storm

214250	9.8	CRITICAL Network	kramdown_project debian fedoraproject canonical	kramdown debian_linux fedora ubuntu_linux	The kramdown gem before 2.3.0 for Ruby processes the template option inside Kramdown documents by default, which allows unintended read access (such as template="/etc/passwd") or unintended embedded …	CWE-862 Missing Authorization	CVE-2020-14001	2024-11-21 14:02	2020-07-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed