Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249971	4.3	警告	Apache Software Foundation	-	Apache Struts の javatemplates プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2087	2012-03-27 18:43	2011-05-13	Show	GitHub Exploit DB Packet Storm

249972	5	警告	inventivetec	-	MediaCAST における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-2081	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249973	7.5	危険	inventivetec	-	MediaCAST における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-2080	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249974	7.5	危険	inventivetec	-	MediaCAST における詳細不明な影響を受ける脆弱性	CWE-20 不適切な入力確認	CVE-2011-2079	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249975	4.3	警告	inventivetec	-	MediaCAST の New Atlanta BlueDragon 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2078	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249976	7.5	危険	inventivetec	-	MediaCAST の New Atlanta BlueDragon 管理インターフェースのデフォルト設定における脆弱性	CWE-16 環境設定	CVE-2011-2077	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249977	5	警告	inventivetec	-	MediaCAST における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-2076	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249978	8.5	危険	Skype Technologies S.A.	-	Skype のクライアントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2074	2012-03-27 18:43	2011-05-10	Show	GitHub Exploit DB Packet Storm

249979	4.3	警告	SquirrelMail Project	-	SquirrelMail の functions/mime.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2023	2012-03-27 18:43	2011-07-10	Show	GitHub Exploit DB Packet Storm

249980	4.3	警告	TIBCO Software	-	TIBCO iProcess Engine および iProcess Workspace におけるセッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2011-2021	2012-03-27 18:43	2011-05-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209671	9.8	CRITICAL Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given process repeatedly at a certain time interval as 'root'. One…	CWE-78 OS Command	CVE-2020-24054	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209672	7.5	HIGH Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols.	CWE-798 Use of Hard-coded Credentials	CVE-2020-24053	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209673	9.1	CRITICAL Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition…	CWE-611 XXE	CVE-2020-24052	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209674	9.8	CRITICAL Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations. It was found that th…	CWE-306 Missing Authentication for Critical Function	CVE-2020-24051	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209675	7.5	HIGH Network	hashicorp	vault-ssh-helper	HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network interface was located, rather than the specific IP add…	CWE-20 Improper Input Validation	CVE-2020-24359	2024-11-21 14:14	2020-08-21	Show	GitHub Exploit DB Packet Storm

209676	9.8	CRITICAL Network	student_management_system_project	student_management_system	Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".	CWE-89 SQL Injection	CVE-2020-23935	2024-11-21 14:14	2020-08-21	Show	GitHub Exploit DB Packet Storm

209677	9.8	CRITICAL Network	phpgurukul	vehicle_parking_management_system	PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".	CWE-89 SQL Injection	CVE-2020-23936	2024-11-21 14:14	2020-08-20	Show	GitHub Exploit DB Packet Storm

209678	7.5	HIGH Network	icinga debian suse	icinga_web_2 debian_linux package_hub	Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web …	CWE-22 Path Traversal	CVE-2020-24368	2024-11-21 14:14	2020-08-20	Show	GitHub Exploit DB Packet Storm

209679	7.1	HIGH Local	linux canonical opensuse oracle starwindsoftware	linux_kernel ubuntu_linux leap sd-wan_edge starwind_virtual_san	In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs be…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-24394	2024-11-21 14:14	2020-08-19	Show	GitHub Exploit DB Packet Storm

209680	7.5	HIGH Network	gunet	open_eclass_platform	GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that the web server blocks directory listings, …	CWE-200 Information Exposure	CVE-2020-24381	2024-11-21 14:14	2020-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed