Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250141 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2648 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
250142 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2647 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
250143 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2646 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
250144 7.5 危険 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-2645 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
250145 4.3 警告 Novell
marcus schafer		 - SUSE Studio で使用される Kiwi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2644 2012-03-27 18:43 2011-08-23 Show GitHub Exploit DB Packet Storm
250146 6.8 警告 The phpMyAdmin Project - phpMyAdmin の sql.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2643 2012-03-27 18:43 2011-07-23 Show GitHub Exploit DB Packet Storm
250147 2.6 注意 The phpMyAdmin Project - phpMyAdmin の table Print view 実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2642 2012-03-27 18:43 2011-07-23 Show GitHub Exploit DB Packet Storm
250148 6.4 警告 ヒューレット・パッカード - HP OpenView Performance Agent および Operations Agent の ovbbccb.exe における任意のファイルを削除される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2608 2012-03-27 18:43 2011-07-1 Show GitHub Exploit DB Packet Storm
250149 4.3 警告 IBM - IBM RTC におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2607 2012-03-27 18:43 2011-05-27 Show GitHub Exploit DB Packet Storm
250150 4.3 警告 IBM - IBM RTC の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2606 2012-03-27 18:43 2011-06-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201681 9.8 CRITICAL
Network 		jsreport jsreport An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8128 2024-11-21 14:38 2020-02-15 Show GitHub Exploit DB Packet Storm
201682 5.3 MEDIUM
Network 		dovecot
fedoraproject 		dovecot
fedora 		The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a den… CWE-20
 Improper Input Validation  		CVE-2020-7957 2024-11-21 14:38 2020-02-13 Show GitHub Exploit DB Packet Storm
201683 8.8 HIGH
Network 		kinetica kinetica The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs. This lack of sanitisation could be exploited to allow an authenticated atta… CWE-78
OS Command  		CVE-2020-8429 2024-11-21 14:38 2020-02-12 Show GitHub Exploit DB Packet Storm
201684 5.4 MEDIUM
Network 		piwigo piwigo Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page. CWE-79
Cross-site Scripting 		CVE-2020-8089 2024-11-21 14:38 2020-02-11 Show GitHub Exploit DB Packet Storm
201685 7.8 HIGH
Local 		ui edgeswitch A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user (Privilege-1) to es… CWE-78
OS Command  		CVE-2020-8126 2024-11-21 14:38 2020-02-8 Show GitHub Exploit DB Packet Storm
201686 7.8 HIGH
Local 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudo… CWE-306
Missing Authentication for Critical Function 		CVE-2020-7954 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
201687 7.5 HIGH
Network 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -iL (aka input file) option. CWE-306
Missing Authentication for Critical Function 		CVE-2020-7953 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
201688 7.5 HIGH
Network 		percona monitoring_and_management pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-7920 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
201689 7.5 HIGH
Network 		rogersmedia citytv_video The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-8507 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
201690 5.3 MEDIUM
Network 		corusent global_tv The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-8506 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm