Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250371	4.3	警告	Geeklog	-	Geeklog におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4647	2011-12-1 16:48	2011-06-23	Show	GitHub Exploit DB Packet Storm

250372	6	警告	Lester Chan	-	WordPress 用 WP-PostRatings プラグインにおける SQL インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-4646	2011-12-1 16:47	2011-11-30	Show	GitHub Exploit DB Packet Storm

250373	7.5	危険	Hastymail	-	Hastymail2 における任意のコマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2011-4542	2011-12-1 16:46	2011-11-30	Show	GitHub Exploit DB Packet Storm

250374	7.5	危険	Novell	-	Novell NetWare の xdrDecodeString 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4191	2011-12-1 16:44	2011-10-5	Show	GitHub Exploit DB Packet Storm

250375	7.5	危険	Namazu Project	-	Namazu におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-5028	2011-12-1 16:42	2011-11-30	Show	GitHub Exploit DB Packet Storm

250376	5	警告	arora	-	Arora における証明書の Common Name (CN) を偽造される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3367	2011-12-1 16:42	2011-11-29	Show	GitHub Exploit DB Packet Storm

250377	7.5	危険	Canonical	-	Ubuntu の cupshelpers スクリプトにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4405	2011-12-1 16:05	2011-11-17	Show	GitHub Exploit DB Packet Storm

250378	5	警告	シスコシステムズ	-	Cisco Nexus 5000 および 3000 シリーズスイッチにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2581	2011-12-1 11:25	2011-09-7	Show	GitHub Exploit DB Packet Storm

250379	7.8	危険	シスコシステムズ	-	複数の Cisco 製品におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2577	2011-12-1 11:25	2011-08-31	Show	GitHub Exploit DB Packet Storm

250380	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager および Cisco Intercompany Media Engine における脆弱性	CWE-noinfo 情報不足	CVE-2011-2564	2011-12-1 11:24	2011-08-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200091	6.1	MEDIUM Network	persis	human_resource_management_portal	The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20), when the "Recommend job posting" function is enabled, al…	CWE-79 Cross-site Scripting	CVE-2020-35753	2024-11-21 14:28	2021-01-27	Show	GitHub Exploit DB Packet Storm

200092	9.8	CRITICAL Network	kaspersky	tinycheck	In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker fo…	CWE-798 Use of Hard-coded Credentials	CVE-2020-35929	2024-11-21 14:28	2021-01-20	Show	GitHub Exploit DB Packet Storm

200093	7.5	HIGH Network	php fedoraproject debian drupal	archive_tar fedora debian_linux drupal	Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.	CWE-22 CWE-59 Path Traversal Link Following	CVE-2020-36193	2024-11-21 14:28	2021-01-19	Show	GitHub Exploit DB Packet Storm

200094	7.7	HIGH Network	presstigers	simple_board_job	Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files …	CWE-22 Path Traversal	CVE-2020-35749	2024-11-21 14:28	2021-01-16	Show	GitHub Exploit DB Packet Storm

200095	5.4	MEDIUM Network	foliovision	fv_flowplayer_video_player	Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2020-35748	2024-11-21 14:28	2021-01-16	Show	GitHub Exploit DB Packet Storm

200096	5.3	MEDIUM Network	mantisbt	source_integration	An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private …	NVD-CWE-noinfo	CVE-2020-36192	2024-11-21 14:28	2021-01-19	Show	GitHub Exploit DB Packet Storm

200097	4.5	MEDIUM Network	jupyter	jupyterhub	JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).	CWE-352 Origin Validation Error	CVE-2020-36191	2024-11-21 14:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

200098	6.1	MEDIUM Network	rails_admin_project	rails_admin	RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.	CWE-79 Cross-site Scripting	CVE-2020-36190	2024-11-21 14:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

200099	7.5	HIGH Network	socket	socket.io-parser	socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-36049	2024-11-21 14:28	2021-01-8	Show	GitHub Exploit DB Packet Storm

200100	7.5	HIGH Network	socket	engine.io	Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-36048	2024-11-21 14:28	2021-01-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed