Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249921 4.3 警告 Pidgin
レッドハット		 - Pidgin などの製品で使用される libpurple におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3594 2012-01-6 18:46 2011-09-29 Show GitHub Exploit DB Packet Storm
249922 6.9 警告 eEye Digital Security - eEye Retina CS Vulnerability Management Console が任意のプログラムを実行する問題 CWE-264
認可・権限・アクセス制御 		CVE-2011-3337 2012-01-6 16:08 2011-11-9 Show GitHub Exploit DB Packet Storm
249923 4.3 警告 Textpattern - Textpattern CMS の setup/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5019 2012-01-6 15:46 2012-01-5 Show GitHub Exploit DB Packet Storm
249924 5 警告 Apache Software Foundation - Apache ActiveMQ におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4905 2012-01-6 15:45 2012-01-5 Show GitHub Exploit DB Packet Storm
249925 6.8 警告 CoCSoft Computing - CoCSoft Stream Down におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5052 2012-01-6 15:43 2012-01-4 Show GitHub Exploit DB Packet Storm
249926 7.5 危険 WP Symposium - WordPress 用の WP Symposium プラグインにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5051 2012-01-6 15:42 2012-01-4 Show GitHub Exploit DB Packet Storm
249927 6 警告 Elitecore Technologies - Elitecore Technologies Cyberoam UTM における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-5050 2012-01-6 15:40 2012-01-4 Show GitHub Exploit DB Packet Storm
249928 7.8 危険 MySQL AB - Windows 上で稼働する MySQL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-5049 2012-01-6 15:39 2012-01-4 Show GitHub Exploit DB Packet Storm
249929 5.1 警告 e107.org - e107 の usersettings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4921 2012-01-6 15:28 2012-01-4 Show GitHub Exploit DB Packet Storm
249930 4.3 警告 e107.org - e107 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4920 2012-01-6 15:28 2012-01-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211221 6.1 MEDIUM
Network 		centreon centreon_host-monitoring_widget
centreon_tactical-overview_widget
centreon_service-monitoring_widget 		Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers… CWE-79
Cross-site Scripting 		CVE-2020-10946 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
211222 4.3 MEDIUM
Adjacent 		centreon widget-host-monitoring
centreon 		Centreon before 19.10.7 exposes Session IDs in server responses. CWE-200
Information Exposure 		CVE-2020-10945 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
211223 7.5 HIGH
Network 		puma
fedoraproject
debian 		puma
fedora
debian_linux 		In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4. - CVE-2020-11076 2024-11-21 13:56 2020-05-23 Show GitHub Exploit DB Packet Storm
211224 7.5 HIGH
Network 		puma
fedoraproject
debian
opensuse 		puma
fedora
debian_linux
leap 		In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connecti… - CVE-2020-11077 2024-11-21 13:56 2020-05-23 Show GitHub Exploit DB Packet Storm
211225 6.8 MEDIUM
Network 		httplib2_project
fedoraproject
debian 		httplib2
fedora
debian_linux 		In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. T… - CVE-2020-11078 2024-11-21 13:56 2020-05-21 Show GitHub Exploit DB Packet Storm
211226 7.5 HIGH
Network 		powerdns
fedoraproject
debian
opensuse 		recursor
fedora
debian_linux
leap
backports_sle 		PowerDNS Recursor from 4.1.0 up to and including 4.3.0 does not sufficiently defend against amplification attacks. An issue in the DNS protocol has been found that allow malicious parties to use recu… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-10995 2024-11-21 13:56 2020-05-20 Show GitHub Exploit DB Packet Storm
211227 5.3 MEDIUM
Network 		dovecot dovecot In Dovecot before 2.3.10.1, remote unauthenticated attackers can crash the lmtp or submission process by sending mail with an empty localpart. CWE-20
 Improper Input Validation  		CVE-2020-10967 2024-11-21 13:56 2020-05-19 Show GitHub Exploit DB Packet Storm
211228 5.3 MEDIUM
Network 		dovecot dovecot In Dovecot before 2.3.10.1, a crafted SMTP/LMTP message triggers an unauthenticated use-after-free bug in submission-login, submission, or lmtp, and can lead to a crash under circumstances involving … CWE-416
 Use After Free 		CVE-2020-10958 2024-11-21 13:56 2020-05-18 Show GitHub Exploit DB Packet Storm
211229 7.5 HIGH
Network 		dovecot dovecot In Dovecot before 2.3.10.1, unauthenticated sending of malformed parameters to a NOOP command causes a NULL Pointer Dereference and crash in submission-login, submission, or lmtp. CWE-476
 NULL Pointer Dereference 		CVE-2020-10957 2024-11-21 13:56 2020-05-18 Show GitHub Exploit DB Packet Storm
211230 8.8 HIGH
Network 		typo3 typo3 In TYPO3 CMS 9.0.0 through 9.5.16 and 10.0.0 through 10.4.1, it has been discovered that backend user settings (in $BE_USER->uc) are vulnerable to insecure deserialization. In combination with vulner… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-11067 2024-11-21 13:56 2020-05-14 Show GitHub Exploit DB Packet Storm