Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249921 5 警告 Certec EDV - Certec atvise webMI2ADS の Web サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4880 2012-04-16 16:45 2012-04-11 Show GitHub Exploit DB Packet Storm
249922 7.9 危険 MICROSYS - MICROSYS PROMOTIC における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-4874 2012-04-16 16:44 2012-04-11 Show GitHub Exploit DB Packet Storm
249923 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品で使用される YARR 正規表現ライブラリにおけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション
CVE-2011-3232 2012-04-16 16:15 2011-09-27 Show GitHub Exploit DB Packet Storm
249924 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-119
バッファエラー
CVE-2011-3005 2012-04-16 16:14 2011-09-27 Show GitHub Exploit DB Packet Storm
249925 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の JSSubScriptLoader における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3004 2012-04-16 16:12 2011-09-27 Show GitHub Exploit DB Packet Storm
249926 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-3003 2012-04-16 16:12 2011-09-27 Show GitHub Exploit DB Packet Storm
249927 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey で使用される ANGLE におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-3002 2012-04-16 16:05 2011-09-27 Show GitHub Exploit DB Packet Storm
249928 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3001 2012-04-16 16:04 2011-09-27 Show GitHub Exploit DB Packet Storm
249929 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品における HTTP レスポンス分割攻撃を誘発される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3000 2012-04-16 16:02 2011-09-27 Show GitHub Exploit DB Packet Storm
249930 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2997 2012-04-16 16:00 2011-09-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201711 8.8 HIGH
Network
dlink dir-615jx10_firmware fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed. CWE-787
 Out-of-bounds Write
CVE-2020-9534 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
201712 5.4 MEDIUM
Network
webnus modern_events_calendar_lite Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to… CWE-79
Cross-site Scripting
CVE-2020-9459 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
201713 8.8 HIGH
Network
justblab blab\!_ws_pro
blab\!_ax_pro
blab\!_ax
blab\!_ws
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to es… CWE-330
 Use of Insufficiently Random Values
CVE-2020-9449 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
201714 6.1 MEDIUM
Network
export_users_to_csv_project export_users_to_csv The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-9466 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
201715 9.8 CRITICAL
Network
eyesofnetwork eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such … CWE-89
SQL Injection
CVE-2020-9465 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
201716 8.8 HIGH
Network
centreon centreon Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_rem… CWE-78
OS Command 
CVE-2020-9463 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
201717 6.1 MEDIUM
Network
gwtupload_project gwtupload There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which wo… CWE-79
Cross-site Scripting
CVE-2020-9447 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
201718 7.8 HIGH
Local
openvpn connect OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dl… CWE-281
 Improper Preservation of Permissions
CVE-2020-9442 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
201719 5.5 MEDIUM
Local
avast antivirus_for_linux
antivirus_pro_plus
antivirus_pro
The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. CWE-436
 Interpretation Conflict
CVE-2020-9399 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
201720 9.1 CRITICAL
Network
lua-openssl_project lua-openssl openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation 
CVE-2020-9434 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm