Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250371	7.5	危険	サン・マイクロシステムズレッドハット	-	OpenJDK Runtime Environment の IcedTea-Web における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0706	2012-03-27 18:43	2011-02-15	Show	GitHub Exploit DB Packet Storm

250372	3.3	注意	daniel friesel	-	feh の feh_unique_filename 関数における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-0702	2012-03-27 18:43	2011-02-14	Show	GitHub Exploit DB Packet Storm

250373	4	警告	WordPress.org	-	WordPress の wp-admin/async-upload.php における投稿の下書きを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-0701	2012-03-27 18:43	2011-02-7	Show	GitHub Exploit DB Packet Storm

250374	10	危険	IBM	-	IBM TCR で使用される IBM TIP における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-0732	2012-03-27 18:43	2010-11-3	Show	GitHub Exploit DB Packet Storm

250375	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0735	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

250376	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0734	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

250377	4.3	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0733	2012-03-27 18:43	2011-02-1	Show	GitHub Exploit DB Packet Storm

250378	6.5	警告	Canonical Eucalyptus Systems	-	UEC などで使用される Eucalyptus における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0730	2012-03-27 18:43	2011-06-2	Show	GitHub Exploit DB Packet Storm

250379	7.2	危険	Canonical	-	language-selector の D-Bus バックエンドにおけるファイルを改ざんされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0729	2012-03-27 18:43	2011-04-29	Show	GitHub Exploit DB Packet Storm

250380	3.5	注意	michael hudson-doyle	-	Loggerhead の templatefunctions.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0728	2012-03-27 18:43	2011-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209241	8.2	HIGH Local	freebsd omniosce openindiana netapp	freebsd omnios openindiana clustered_data_ontap	bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demons…	CWE-862 Missing Authorization	CVE-2020-24718	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209242	7.1	HIGH Local	mitel	micontact_center_business	The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allo…	CWE-79 CWE-20 Cross-site Scripting Improper Input Validation	CVE-2020-24692	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209243	8.8	HIGH Network	openmrs	htmlformentry	A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Lan…	CWE-22 Path Traversal	CVE-2020-24621	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209244	5.3	MEDIUM Network	pexip	pexip_infinity	Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.	CWE-20 Improper Input Validation	CVE-2020-24615	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209245	5.3	MEDIUM Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.	NVD-CWE-noinfo	CVE-2020-24595	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209246	9.6	CRITICAL Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an …	CWE-79 Cross-site Scripting	CVE-2020-24594	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209247	7.2	HIGH Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation.	CWE-20 CWE-89 Improper Input Validation SQL Injection	CVE-2020-24593	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209248	5.3	MEDIUM Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization.	CWE-116 Improper Encoding or Escaping of Output	CVE-2020-24592	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209249	9.8	CRITICAL Network	hpe	utility_computing_service_meter	Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.	CWE-22 Path Traversal	CVE-2020-24626	2024-11-21 14:15	2020-09-23	Show	GitHub Exploit DB Packet Storm

209250	7.5	HIGH Network	hpe	utility_computing_service_meter	Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.	CWE-22 Path Traversal	CVE-2020-24625	2024-11-21 14:15	2020-09-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed