Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250021 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2011-4895 2011-12-27 11:10 2011-12-23 Show GitHub Exploit DB Packet Storm
250022 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2011-4894 2011-12-27 11:06 2011-12-23 Show GitHub Exploit DB Packet Storm
250023 7.6 危険 The Tor Project - Tor におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2778 2011-12-27 11:04 2011-12-16 Show GitHub Exploit DB Packet Storm
250024 4.3 警告 The Tor Project - Tor におけるブリッジを列挙される脆弱性 CWE-200
情報漏えい 		CVE-2011-2769 2011-12-27 11:01 2011-10-27 Show GitHub Exploit DB Packet Storm
250025 5.8 警告 The Tor Project - Tor における匿名化のためのプロパティを無効にされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2768 2011-12-27 10:54 2011-10-27 Show GitHub Exploit DB Packet Storm
250026 7.5 危険 PmWiki - PmWiki の PageListSort 関数における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4453 2011-12-27 10:46 2011-11-11 Show GitHub Exploit DB Packet Storm
250027 - - The Support Incident Tracker Project - Support Incident Tracker に複数の脆弱性 - CVE-2011-3831
CVE-2011-3833
CVE-2011-5067
CVE-2011-5068
CVE-2011-5069
CVE-2011-5070 		2011-12-27 09:42 2011-12-5 Show GitHub Exploit DB Packet Storm
250028 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog PRO および Winlog Lite におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4037 2011-12-26 16:32 2011-12-22 Show GitHub Exploit DB Packet Storm
250029 5 警告 Moodle - Moodle の calendar/set.php における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4203 2011-12-26 16:32 2011-12-22 Show GitHub Exploit DB Packet Storm
250030 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4634 2011-12-26 16:31 2011-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211251 8.8 HIGH
Network 		octopus octopus_deploy In Octopus Deploy before 2020.1.5, for customers running on-premises Active Directory linked to their Octopus server, an authenticated user can leverage a bug to escalate privileges. NVD-CWE-noinfo
CVE-2020-10678 2024-11-21 13:55 2020-03-20 Show GitHub Exploit DB Packet Storm
211252 7.5 HIGH
Network 		jsonparser_project
fedoraproject 		jsonparser
fedora 		The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service (infinite loop) via a Delete call. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-10675 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211253 7.8 HIGH
Local 		denx
opensuse 		u-boot
leap 		Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default con… CWE-20
 Improper Input Validation  		CVE-2020-10648 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211254 9.8 CRITICAL
Network 		perlspeak_project perlspeak PerlSpeak through 2.01 allows attackers to execute arbitrary OS commands, as demonstrated by use of system and 2-argument open. CWE-78
OS Command  		CVE-2020-10674 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211255 6.5 MEDIUM
Network 		logicaldoc logicaldoc LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of t… CWE-89
SQL Injection 		CVE-2020-10365 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211256 8.8 HIGH
Network 		fasterxml
debian
netapp
oracle 		jackson-databind
debian_linux
steelstore_cloud_integrated_storage
retail_xstore_point_of_service
primavera_unifier
retail_service_backbone
weblogic_server
retail_merchandising_sy… 		FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). NVD-CWE-Other
CVE-2020-10673 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211257 8.8 HIGH
Network 		fasterxml
debian
netapp
oracle 		jackson-databind
debian_linux
steelstore_cloud_integrated_storage
retail_xstore_point_of_service
primavera_unifier
retail_service_backbone
weblogic_server
retail_merchandising_sy… 		FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka… NVD-CWE-Other
CVE-2020-10672 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211258 6.7 MEDIUM
Local 		docker desktop Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwr… CWE-59
Link Following 		CVE-2020-10665 2024-11-21 13:55 2020-03-19 Show GitHub Exploit DB Packet Storm
211259 4.3 MEDIUM
Network 		entrustdatacard entelligence_security_provider Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with… CWE-295
Improper Certificate Validation  		CVE-2020-10659 2024-11-21 13:55 2020-03-18 Show GitHub Exploit DB Packet Storm
211260 5.4 MEDIUM
Network 		opencart opencart OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section. CWE-79
Cross-site Scripting 		CVE-2020-10596 2024-11-21 13:55 2020-03-18 Show GitHub Exploit DB Packet Storm