Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250291 5 警告 Fetchmail Project - fetchmail におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1947 2012-03-27 18:43 2011-06-2 Show GitHub Exploit DB Packet Storm
250292 7.2 危険 hongli lai - libgnomesu の gnomesu-pam-backend における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1946 2012-03-27 18:43 2011-07-7 Show GitHub Exploit DB Packet Storm
250293 2.1 注意 Fedora Project
レッドハット		 - Fedora の NetworkManager パッケージの libnm-util の destroy_one_secret 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1943 2012-03-27 18:43 2011-06-14 Show GitHub Exploit DB Packet Storm
250294 6.8 警告 VideoLAN
FFmpeg
Libav		 - VideoLAN VLC メディアプレイヤーなどの製品で使用される FFmpeg および libav の Sunplus SP5X JPEG デコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1931 2012-03-27 18:43 2011-07-7 Show GitHub Exploit DB Packet Storm
250295 5 警告 Wouter Verhelst - nbd-server の nbd-server.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-1925 2012-03-27 18:43 2011-05-31 Show GitHub Exploit DB Packet Storm
250296 5 警告 The Tor Project - Tor の policy_summarize 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-1924 2012-03-27 18:43 2011-02-28 Show GitHub Exploit DB Packet Storm
250297 3.3 注意 ihji
NetBSD		 - pmake などの製品で使用される NetBSD の make インクルードファイルにおける任意のファイルを上書される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-1920 2012-03-27 18:43 2011-05-23 Show GitHub Exploit DB Packet Storm
250298 9.3 危険 Foxit Software Inc - Foxit Reader の FreeType エンジンのType 1 フォントデコーダにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1908 2012-03-27 18:43 2011-06-24 Show GitHub Exploit DB Packet Storm
250299 5 警告 Trustwave - Trustwave WebDefend Enterprise におけるイベント収集テーブルを読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-1906 2012-03-27 18:43 2011-05-5 Show GitHub Exploit DB Packet Storm
250300 6.8 警告 Proofpoint, Inc. - Proofpoint Protection Server の管理モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1905 2012-03-27 18:43 2011-05-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201901 6.1 MEDIUM
Network 		nextcloud nextcloud_server A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation. CWE-79
Cross-site Scripting 		CVE-2020-8120 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201902 4.3 MEDIUM
Network 		nextcloud nextcloud_server Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app. CWE-863
 Incorrect Authorization 		CVE-2020-8119 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201903 5.0 MEDIUM
Network 		nextcloud
novell
opensuse 		nextcloud_server
suse_linux_enterprise_server
backports_sle 		An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8118 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201904 4.3 MEDIUM
Network 		nextcloud nextcloud_server Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event. CWE-281
 Improper Preservation of Permissions 		CVE-2020-8117 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201905 7.3 HIGH
Network 		dot-prop_project dot-prop Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-8116 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201906 6.1 MEDIUM
Network 		revive-adserver revive_adserver A reflected XSS vulnerability has been discovered in the publicly accessible afr.php delivery script of Revive Adserver <= 5.0.3 by Jacopo Tediosi. There are currently no known exploits: the session … CWE-79
Cross-site Scripting 		CVE-2020-8115 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
201907 9.8 CRITICAL
Network 		phpabook_project phpabook An issue was discovered in phpABook 0.9 Intermediate. On the login page, if one sets a userInfo cookie with the value of admin+1+en (user+perms+lang), one can login as any user without a password. CWE-287
Improper Authentication 		CVE-2020-8510 2024-11-21 14:38 2020-02-4 Show GitHub Exploit DB Packet Storm
201908 4.3 MEDIUM
Network 		prototypejs prototype Prototype 1.6.0.1 allows remote authenticated users to forge ticket creation (on behalf of other user accounts) via a modified email ID field. CWE-862
 Missing Authorization 		CVE-2020-7993 2024-11-21 14:38 2020-02-4 Show GitHub Exploit DB Packet Storm
201909 9.8 CRITICAL
Network 		norman malware_cleaner nsak64.sys in Norman Malware Cleaner 2.08.08 allows users to call arbitrary kernel functions because the passing of function pointers between user and kernel mode is mishandled. CWE-787
 Out-of-bounds Write 		CVE-2020-8508 2024-11-21 14:38 2020-02-3 Show GitHub Exploit DB Packet Storm
201910 6.1 MEDIUM
Network 		maxum rumpus An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functiona… CWE-79
Cross-site Scripting 		CVE-2020-8514 2024-11-21 14:38 2020-02-3 Show GitHub Exploit DB Packet Storm