Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250281	4.3	警告	Wireshark	-	Wireshark におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1958	2012-03-27 18:43	2011-05-31	Show	GitHub Exploit DB Packet Storm

250282	4.3	警告	Wireshark	-	Wireshark の dissect_dcm_main 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1957	2012-03-27 18:43	2011-05-31	Show	GitHub Exploit DB Packet Storm

250283	4.3	警告	Wireshark	-	Wireshark の bytes_repr_len 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1956	2012-03-27 18:43	2011-06-6	Show	GitHub Exploit DB Packet Storm

250284	6.8	警告	postrev	-	Post Revolution におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-1954	2012-03-27 18:43	2011-05-22	Show	GitHub Exploit DB Packet Storm

250285	4.3	警告	postrev	-	Post Revolution の common.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1953	2012-03-27 18:43	2011-05-22	Show	GitHub Exploit DB Packet Storm

250286	5	警告	postrev	-	Post Revolution の common.php におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1952	2012-03-27 18:43	2011-05-22	Show	GitHub Exploit DB Packet Storm

250287	4.3	警告	pcre.org balabit	-	Balabit syslog-ng の lib/logmatcher.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1951	2012-03-27 18:43	2011-05-3	Show	GitHub Exploit DB Packet Storm

250288	5.5	警告	Plone Foundation	-	Plone の plone.app.users における任意のアカウントのプロパティを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1950	2012-03-27 18:43	2011-06-6	Show	GitHub Exploit DB Packet Storm

250289	3.5	注意	Plone Foundation	-	Plone の safe_html フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1949	2012-03-27 18:43	2011-06-6	Show	GitHub Exploit DB Packet Storm

250290	4.3	警告	Plone Foundation	-	Plone におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1948	2012-03-27 18:43	2011-06-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201911	5.3	MEDIUM Network	torproject	tor	The daemon in Tor through 0.4.1.8 and 0.4.2.x through 0.4.2.6 does not verify that a rendezvous node is known before attempting to connect to it, which might make it easier for remote attackers to di…	NVD-CWE-noinfo	CVE-2020-8516	2024-11-21 14:38	2020-02-2	Show	GitHub Exploit DB Packet Storm

201912	9.8	CRITICAL Network	draytek	vigor2960_firmware vigor300b_firmware vigor3900_firmware	DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta devices allow remote code execution as root (without authentication) via shell metacharacter…	CWE-78 OS Command	CVE-2020-8515	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

201913	6.1	MEDIUM Network	icewarp	icewarp_server	In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.	CWE-79 Cross-site Scripting	CVE-2020-8512	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

201914	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.	CWE-352 Origin Validation Error	CVE-2020-8505	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

201915	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.	CWE-352 Origin Validation Error	CVE-2020-8504	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

201916	6.5	MEDIUM Network	biscom	secure_file_transfer	Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-uploa…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8503	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

201917	4.3	MEDIUM Network	zohocorp	manageengine_remote_access_plus	An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined c…	NVD-CWE-noinfo	CVE-2020-8422	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

201918	9.8	CRITICAL Network	simplejobscript	simplejobscript	controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-8440	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

201919	9.8	CRITICAL Network	hashicorp	nomad	HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.	CWE-295 Improper Certificate Validation	CVE-2020-7956	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

201920	5.3	MEDIUM Network	hashicorp	consul	HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.	CWE-863 Incorrect Authorization	CVE-2020-7955	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed