Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250261 5 警告 IBM - IBM Datacap Taskmaster Capture の Web Client Service における平文のパスワードを要求する脆弱性 CWE-310
暗号の問題 		CVE-2011-2142 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
250262 7.5 危険 IBM - IBM Datacap Taskmaster Capture の TMWeb におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2141 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
250263 5 警告 opensymphony
Apache Software Foundation		 - Apache Struts の XWork における重要情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2088 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
250264 4.3 警告 Apache Software Foundation - Apache Struts の javatemplates プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2087 2012-03-27 18:43 2011-05-13 Show GitHub Exploit DB Packet Storm
250265 5 警告 inventivetec - MediaCAST における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2081 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
250266 7.5 危険 inventivetec - MediaCAST における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2080 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
250267 7.5 危険 inventivetec - MediaCAST における詳細不明な影響を受ける脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2079 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
250268 4.3 警告 inventivetec - MediaCAST の New Atlanta BlueDragon 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2078 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
250269 7.5 危険 inventivetec - MediaCAST の New Atlanta BlueDragon 管理インターフェースのデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2011-2077 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
250270 5 警告 inventivetec - MediaCAST における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2076 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201701 7.5 HIGH
Network 		gitlab gitlab GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal. CWE-22
Path Traversal 		CVE-2020-7966 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
201702 9.8 CRITICAL
Network 		gitlab gitlab GitLab EE 8.9 and later through 12.7.2 has Insecure Permission CWE-276
Incorrect Default Permissions  		CVE-2020-8114 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
201703 5.3 MEDIUM
Network 		gitlab gitlab GitLab EE 8.9 and later through 12.7.2 has Insecure Permission CWE-276
Incorrect Default Permissions  		CVE-2020-7979 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
201704 7.5 HIGH
Network 		squid-cache
opensuse
canonical 		squid
leap
ubuntu_linux 		An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On … CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write 		CVE-2020-8517 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201705 7.3 HIGH
Network 		squid-cache
canonical
opensuse
fedoraproject
debian 		squid
ubuntu_linux
leap
fedora
debian_linux 		An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy. CWE-787
CWE-131
 Out-of-bounds Write
Incorrect Calculation of Buffer Size 		CVE-2020-8450 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201706 7.5 HIGH
Network 		squid-cache
debian
canonical
opensuse
fedoraproject 		squid
debian_linux
ubuntu_linux
leap
fedora 		An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security fi… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-8449 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201707 9.8 CRITICAL
Network 		klona_project klona Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona. CWE-20
 Improper Input Validation  		CVE-2020-8125 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201708 5.3 MEDIUM
Network 		url-parse_project url-parse Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. CWE-20
 Improper Input Validation  		CVE-2020-8124 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201709 4.9 MEDIUM
Network 		strapi strapi A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8123 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201710 4.3 MEDIUM
Network 		nextcloud nextcloud_server A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received. CWE-20
 Improper Input Validation  		CVE-2020-8122 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm