Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249921	5	警告	Certec EDV	-	Certec atvise webMI2ADS の Web サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4880	2012-04-16 16:45	2012-04-11	Show	GitHub Exploit DB Packet Storm

249922	7.9	危険	MICROSYS	-	MICROSYS PROMOTIC における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-4874	2012-04-16 16:44	2012-04-11	Show	GitHub Exploit DB Packet Storm

249923	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品で使用される YARR 正規表現ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3232	2012-04-16 16:15	2011-09-27	Show	GitHub Exploit DB Packet Storm

249924	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-119 バッファエラー	CVE-2011-3005	2012-04-16 16:14	2011-09-27	Show	GitHub Exploit DB Packet Storm

249925	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey の JSSubScriptLoader における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3004	2012-04-16 16:12	2011-09-27	Show	GitHub Exploit DB Packet Storm

249926	10	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3003	2012-04-16 16:12	2011-09-27	Show	GitHub Exploit DB Packet Storm

249927	9.3	危険	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey で使用される ANGLE におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-3002	2012-04-16 16:05	2011-09-27	Show	GitHub Exploit DB Packet Storm

249928	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3001	2012-04-16 16:04	2011-09-27	Show	GitHub Exploit DB Packet Storm

249929	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品における HTTP レスポンス分割攻撃を誘発される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3000	2012-04-16 16:02	2011-09-27	Show	GitHub Exploit DB Packet Storm

249930	10	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2997	2012-04-16 16:00	2011-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209281	6.1	MEDIUM Network	os4ed	opensis	OpenSIS Community Edition before 7.5 is affected by a cross-site scripting (XSS) vulnerability in SideForStudent.php via the modname parameter.	CWE-79 Cross-site Scripting	CVE-2020-27409	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209282	7.5	HIGH Network	os4ed	opensis	OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users.	CWE-287 CWE-640 Improper Authentication Weak Password Recovery Mechanism for Forgotten Password	CVE-2020-27408	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209283	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27771	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209284	5.5	MEDIUM Local	imagemagick debian	imagemagick debian_linux	Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered …	CWE-190 Integer Overflow or Wraparound	CVE-2020-27770	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209285	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27766	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209286	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.…	CWE-369 Divide By Zero	CVE-2020-27765	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209287	3.3	LOW Local	imagemagick redhat debian	imagemagick enterprise_linux debian_linux	A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran…	CWE-190 Integer Overflow or Wraparound	CVE-2020-27767	2024-11-21 14:21	2020-12-5	Show	GitHub Exploit DB Packet Storm

209288	6.8	MEDIUM Local	canonical	snapcraft ubuntu_linux	In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl…	CWE-427 Uncontrolled Search Path Element	CVE-2020-27348	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

209289	6.1	MEDIUM Network	lxml redhat debian fedoraproject netapp oracle	lxml enterprise_linux software_collections debian_linux fedora snapcenter communications_offline_mediation_controller zfs_storage_appliance_kit	A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r…	-	CVE-2020-27783	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

209290	7.5	HIGH Network	freedesktop redhat debian	poppler enterprise_linux debian_linux	A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' …	CWE-824 Access of Uninitialized Pointer	CVE-2020-27778	2024-11-21 14:21	2020-12-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed