Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250121 7.8 危険 シスコシステムズ - Cisco IOS の cat6000-dot1x コンポーネントにおけるサービス運用妨害 (トラフィックストーム) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2057 2011-10-31 14:12 2011-10-22 Show GitHub Exploit DB Packet Storm
250122 5 警告 シスコシステムズ - Cisco CiscoWorks Common Services における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2042 2011-10-31 14:11 2011-10-22 Show GitHub Exploit DB Packet Storm
250123 7.8 危険 シスコシステムズ - Cisco IOS の ethernet-lldp コンポーネントにおけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1640 2011-10-31 14:10 2011-10-22 Show GitHub Exploit DB Packet Storm
250124 7.5 危険 NexusPHP project - NexusPHP の thanks.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4026 2011-10-31 14:10 2011-10-21 Show GitHub Exploit DB Packet Storm
250125 4.3 警告 OCS Inventory Team - OCS Inventory NG の ocsinventory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4024 2011-10-31 14:08 2011-10-21 Show GitHub Exploit DB Packet Storm
250126 4.3 警告 The Document Foundation
OpenOffice.org Project		 - OpenOffice.org および LibreOffice の oowriter におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2713 2011-10-31 14:08 2011-10-5 Show GitHub Exploit DB Packet Storm
250127 4.3 警告 Simple Machines - Simple Machines Forum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4173 2011-10-31 14:07 2011-09-18 Show GitHub Exploit DB Packet Storm
250128 4.3 警告 KENT-WEB - KENT-WEB WEB FORUM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4172 2011-10-31 14:05 2011-10-24 Show GitHub Exploit DB Packet Storm
250129 4.3 警告 IBM - IBM WebSphere ILOG Rule Team Server の content/error.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4171 2011-10-31 14:00 2011-10-5 Show GitHub Exploit DB Packet Storm
250130 7.5 危険 Simple Machines - Simple Machines Forum における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-3615 2011-10-31 13:59 2011-09-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198401 6.1 MEDIUM
Network 		adminserv_project adminserv ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Chris92de AdminServ. It has been declared as problematic. This vulnerability affects unknown code of the file resources/core/adminserv.php… CWE-79
Cross-site Scripting 		CVE-2020-36637 2024-11-21 14:29 2022-12-30 Show GitHub Exploit DB Packet Storm
198402 5.3 MEDIUM
Network 		robotsandpencils go-saml XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash collisions depending on their control over the input. CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-36563 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198403 7.5 HIGH
Network 		dht_project dht Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector. CWE-617
 Reachable Assertion 		CVE-2020-36562 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198404 6.1 MEDIUM
Network 		openmrs admin_ui_module A vulnerability classified as problematic has been found in OpenMRS Admin UI Module up to 1.4.x. Affected is the function sendErrorMessage of the file omod/src/main/java/org/openmrs/module/adminui/pa… - CVE-2020-36636 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198405 9.1 CRITICAL
Network 		digitalocean golang-nanoauth Authentication is globally bypassed in github.com/nanobox-io/golang-nanoauth between v0.0.0-20160722212129-ac0cc4484ad4 and v0.0.0-20200131131040-063a3fb69896 if ListenAndServe is called with an empt… CWE-287
Improper Authentication 		CVE-2020-36569 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198406 7.5 HIGH
Network 		revel revel Unsanitized input in the query parser in github.com/revel/revel before v1.0.0 allows remote attackers to cause resource exhaustion via memory allocation. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-36568 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198407 9.1 CRITICAL
Network 		tar-utils_project tar-utils Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory. CWE-22
Path Traversal 		CVE-2020-36566 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198408 7.5 HIGH
Network 		nosurf_project nosurf Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user supplied token to be considered valid. CWE-20
 Improper Input Validation  		CVE-2020-36564 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198409 9.1 CRITICAL
Network 		go-unzip_project go-unzip Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory. CWE-22
Path Traversal 		CVE-2020-36560 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm
198410 7.5 HIGH
Network 		aahframework aah Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read. CWE-22
Path Traversal 		CVE-2020-36559 2024-11-21 14:29 2022-12-28 Show GitHub Exploit DB Packet Storm