Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250271 8.5 危険 Skype Technologies S.A. - Skype のクライアントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2074 2012-03-27 18:43 2011-05-10 Show GitHub Exploit DB Packet Storm
250272 4.3 警告 SquirrelMail Project - SquirrelMail の functions/mime.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2023 2012-03-27 18:43 2011-07-10 Show GitHub Exploit DB Packet Storm
250273 4.3 警告 TIBCO Software - TIBCO iProcess Engine および iProcess Workspace におけるセッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2011-2021 2012-03-27 18:43 2011-05-18 Show GitHub Exploit DB Packet Storm
250274 4.3 警告 TIBCO Software - TIBCO iProcess Engine および iProcess Workspace におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2020 2012-03-27 18:43 2011-05-18 Show GitHub Exploit DB Packet Storm
250275 4.3 警告 Wireshark - Wireshark の snoop_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1959 2012-03-27 18:43 2011-05-31 Show GitHub Exploit DB Packet Storm
250276 4.3 警告 Wireshark - Wireshark におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-1958 2012-03-27 18:43 2011-05-31 Show GitHub Exploit DB Packet Storm
250277 4.3 警告 Wireshark - Wireshark の dissect_dcm_main 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1957 2012-03-27 18:43 2011-05-31 Show GitHub Exploit DB Packet Storm
250278 4.3 警告 Wireshark - Wireshark の bytes_repr_len 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-1956 2012-03-27 18:43 2011-06-6 Show GitHub Exploit DB Packet Storm
250279 6.8 警告 postrev - Post Revolution におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1954 2012-03-27 18:43 2011-05-22 Show GitHub Exploit DB Packet Storm
250280 4.3 警告 postrev - Post Revolution の common.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1953 2012-03-27 18:43 2011-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209251 9.8 CRITICAL
Network 		westerndigital my_cloud_firmware Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140. CWE-20
CWE-78
 Improper Input Validation 
OS Command  		CVE-2020-25765 2024-11-21 14:18 2020-10-28 Show GitHub Exploit DB Packet Storm
209252 6.1 MEDIUM
Network 		antsword_project antsword AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code… CWE-79
Cross-site Scripting 		CVE-2020-25470 2024-11-21 14:18 2020-10-26 Show GitHub Exploit DB Packet Storm
209253 9.8 CRITICAL
Network 		ucms_project ucms An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-25483 2024-11-21 14:18 2020-10-24 Show GitHub Exploit DB Packet Storm
209254 9.8 CRITICAL
Network 		crmeb crmeb A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-25466 2024-11-21 14:18 2020-10-24 Show GitHub Exploit DB Packet Storm
209255 6.5 MEDIUM
Network 		bigbluebutton bigbluebutton BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-25820 2024-11-21 14:18 2020-10-21 Show GitHub Exploit DB Packet Storm
209256 7.5 HIGH
Network 		mozilla
redhat
fedoraproject
oracle 		network_security_services
enterprise_linux
fedora
communications_offline_mediation_controller
communications_pricing_design_center
jd_edwards_enterpriseone_tools 		A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-25648 2024-11-21 14:18 2020-10-21 Show GitHub Exploit DB Packet Storm
209257 7.5 HIGH
Network 		qualcomm qualcomm_mobile_access_point The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() functi… CWE-476
 NULL Pointer Dereference 		CVE-2020-25858 2024-11-21 14:18 2020-10-16 Show GitHub Exploit DB Packet Storm
209258 7.5 HIGH
Network 		powerdns
opensuse 		recursor
leap
backports_sle 		An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSS… NVD-CWE-noinfo
CVE-2020-25829 2024-11-21 14:18 2020-10-16 Show GitHub Exploit DB Packet Storm
209259 6.7 MEDIUM
Local 		qualcomm qcmap The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A lo… CWE-78
OS Command  		CVE-2020-25859 2024-11-21 14:18 2020-10-16 Show GitHub Exploit DB Packet Storm
209260 2.4 LOW
Physics 		telegram telegram_desktop Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizar… CWE-306
Missing Authentication for Critical Function 		CVE-2020-25824 2024-11-21 14:18 2020-10-15 Show GitHub Exploit DB Packet Storm