Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250361	9.3	危険	VMware	-	複数の VMware 製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3868	2011-10-14 09:09	2011-10-4	Show	GitHub Exploit DB Packet Storm

250362	6.8	警告	Cherokee Project	-	Cherokee の Cherokee-admin におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-2191	2011-10-14 09:03	2011-10-7	Show	GitHub Exploit DB Packet Storm

250363	2.1	注意	Cherokee Project	-	Cherokee の generate_admin_password 関数における admin パスワードを推測される脆弱性	CWE-310 暗号の問題	CVE-2011-2190	2011-10-14 09:00	2011-10-7	Show	GitHub Exploit DB Packet Storm

250364	7.8	危険	Linux	-	Linux kernel の net/core/net_namespace.c におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2189	2011-10-14 08:56	2011-10-10	Show	GitHub Exploit DB Packet Storm

250365	9.3	危険	Plone Foundation Zope Foundation	-	Plone で使用される Zope における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3587	2011-10-13 14:45	2011-10-4	Show	GitHub Exploit DB Packet Storm

250366	9.3	危険	Plone Foundation	-	Plone の CMFEditions コンポーネントにおけるサブオブジェクトにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4030	2011-10-13 14:44	2011-10-4	Show	GitHub Exploit DB Packet Storm

250367	6.8	警告	Sitaram Chamarty	-	gitolite の Admin Defined Commands (ADC) 機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1572	2011-10-13 14:44	2011-10-4	Show	GitHub Exploit DB Packet Storm

250368	5	警告	Juan Toledo	-	EtherApe の add_conversation 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3369	2011-10-13 14:43	2011-09-30	Show	GitHub Exploit DB Packet Storm

250369	4.9	警告	DAEMON Tools	-	DAEMON Tools におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3987	2011-10-13 12:06	2011-10-13	Show	GitHub Exploit DB Packet Storm

250370	4.3	警告	Pligg	-	Pligg におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3986	2011-10-13 12:05	2011-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198941	4.3	MEDIUM Network	mbconnectline	mbconnect24 mymbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-35559	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

198942	7.5	HIGH Network	mbconnectline helmholz	mbconnect24 mymbconnect24 myrex24.virtual myrex24	An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35558	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

198943	6.5	MEDIUM Network	mbconnectline helmholz	mbconnect24 mymbconnect24 myrex24.virtual myrex24	An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not hav…	CWE-269 Improper Privilege Management	CVE-2020-35557	2024-11-21 14:27	2021-02-17	Show	GitHub Exploit DB Packet Storm

198944	7.2	HIGH Network	batflat	batflat	Sruu.pl in Batflat 1.3.6 allows an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Users tab. To exploit this, one must login to the …	CWE-94 Code Injection	CVE-2020-35734	2024-11-21 14:27	2021-02-16	Show	GitHub Exploit DB Packet Storm

198945	7.8	HIGH Local	freedesktop	dbus	A use-after-free flaw was found in D-Bus Development branch <= 1.13.16, dbus-1.12.x stable branch <= 1.12.18, and dbus-1.10.x and older branches <= 1.10.30 when a system has multiple usernames sharin…	CWE-416 Use After Free	CVE-2020-35512	2024-11-21 14:27	2021-02-16	Show	GitHub Exploit DB Packet Storm

198946	7.5	HIGH Network	openvswitch debian fedoraproject	openvswitch debian_linux fedora	A vulnerability was found in openvswitch. A limitation in the implementation of userspace packet parsing can allow a malicious user to send a specially crafted packet causing the resulting megaflow i…	-	CVE-2020-35498	2024-11-21 14:27	2021-02-12	Show	GitHub Exploit DB Packet Storm

198947	6.1	MEDIUM Network	adminer	adminer	Adminer through 4.7.8 allows XSS via the history parameter to the default URI.	CWE-79 Cross-site Scripting	CVE-2020-35572	2024-11-21 14:27	2021-02-10	Show	GitHub Exploit DB Packet Storm

198948	8.8	HIGH Network	librenms	librenms	A second-order SQL injection issue in Widgets/TopDevicesController.php (aka the Top Devices dashboard widget) of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL …	CWE-89 SQL Injection	CVE-2020-35700	2024-11-21 14:27	2021-02-8	Show	GitHub Exploit DB Packet Storm

198949	7.5	HIGH Network	jetbrains	teamcity	JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35667	2024-11-21 14:27	2021-02-4	Show	GitHub Exploit DB Packet Storm

198950	5.4	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows authenticated reflected XSS.	CWE-79 Cross-site Scripting	CVE-2020-35482	2024-11-21 14:27	2021-02-4	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed