Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249971	7.5	危険	PHPIDS	-	PHPIDS におけるルールセット回避の脆弱性	CWE-94 コード・インジェクション	CVE-2011-5021	2012-01-5 10:15	2011-12-29	Show	GitHub Exploit DB Packet Storm

249972	5	警告	GoAhead Software, Inc.	-	GoAhead WebServer におけるサービス運用妨害 (デーモン停止) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5111	2012-01-5 10:13	2011-12-27	Show	GitHub Exploit DB Packet Storm

249973	5	警告	DHTTPD	-	dhttpd におけるサービス運用妨害 (デーモン停止) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-5110	2012-01-5 10:13	2011-12-27	Show	GitHub Exploit DB Packet Storm

249974	5	警告	Apache Software Foundation	-	Apache Tomcat におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4084	2012-01-4 16:50	2011-12-30	Show	GitHub Exploit DB Packet Storm

249975	5	警告	Google	-	Google V8 におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-5037	2012-01-4 16:48	2011-12-30	Show	GitHub Exploit DB Packet Storm

249976	5	警告	Christian Neukirchen	-	Rack におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-5036	2012-01-4 16:48	2011-12-30	Show	GitHub Exploit DB Packet Storm

249977	7.8	危険	Apache Software Foundation	-	Apache Geronimo におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-5034	2012-01-4 16:47	2011-12-30	Show	GitHub Exploit DB Packet Storm

249978	7.8	危険	JRuby	-	JRuby におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4838	2012-01-4 16:43	2011-12-28	Show	GitHub Exploit DB Packet Storm

249979	5	警告	Plone Foundation	-	Plone におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4462	2012-01-4 16:38	2011-12-30	Show	GitHub Exploit DB Packet Storm

249980	9.3	危険	マイクロソフト	-	Microsoft .NET Framework における任意のユーザアカウントへアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3417	2012-01-4 16:34	2011-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197761	7.5	HIGH Network	sharp	aquos_sh-m02_firmware aquos_sh-rm02_firmware aquos_mini_sh-m03_firmware aquos_l2_firmware aquos_sense_lite_sh-m05_firmware aquos_sense_firmware aquos_compact_sh-m06_firmware aquo…	SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build num…	CWE-200 Information Exposure	CVE-2020-5571	2024-11-21 14:34	2020-04-23	Show	GitHub Exploit DB Packet Storm

197762	7.8	HIGH Local	plex	media_server	Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.	CWE-427 Uncontrolled Search Path Element	CVE-2020-5740	2024-11-21 14:34	2020-04-23	Show	GitHub Exploit DB Packet Storm

197763	8.4	HIGH Local	toshiba	password_tool_for_windows	An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO…	CWE-428 Unquoted Search Path or Element	CVE-2020-5569	2024-11-21 14:34	2020-04-20	Show	GitHub Exploit DB Packet Storm

197764	5.4	MEDIUM Network	tenable	tenable.sc	Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation technique…	CWE-79 Cross-site Scripting	CVE-2020-5737	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197765	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of…	CWE-601 Open Redirect	CVE-2020-5733	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197766	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticate…	CWE-601 Open Redirect	CVE-2020-5732	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197767	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5731	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197768	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5730	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197769	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is su…	CWE-79 Cross-site Scripting	CVE-2020-5729	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197770	6.1	MEDIUM Network	openmrs	openmrs	OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which all…	CWE-79 CWE-20 Cross-site Scripting Improper Input Validation	CVE-2020-5728	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed