Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250391 5 警告 シスコシステムズ - Cisco SA 500 series security appliances における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2546 2011-12-1 11:14 2011-07-20 Show GitHub Exploit DB Packet Storm
250392 6.8 警告 マイクロソフト
シスコシステムズ		 - Cisco VPN Client における権限を取得される脆弱性 CWE-DesignError
CVE-2011-2678 2011-12-1 11:14 2011-07-7 Show GitHub Exploit DB Packet Storm
250393 7.8 危険 シスコシステムズ - Cisco IOS におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2064 2011-12-1 11:12 2011-07-6 Show GitHub Exploit DB Packet Storm
250394 5 警告 シスコシステムズ - Cisco IOS における Router Advertisement Guarding 機能が回避される脆弱性 CWE-16
環境設定 		CVE-2011-2395 2011-12-1 11:12 2011-06-9 Show GitHub Exploit DB Packet Storm
250395 7.2 危険 マイクロソフト
シスコシステムズ		 - Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2041 2011-12-1 11:11 2011-06-1 Show GitHub Exploit DB Packet Storm
250396 10 危険 シスコシステムズ - Cisco Network Registrar におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-2024 2011-12-1 11:11 2011-06-1 Show GitHub Exploit DB Packet Storm
250397 1.5 注意 シスコシステムズ - Cisco Unified IP Phones 7900 デバイスにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1637 2011-12-1 11:10 2011-06-1 Show GitHub Exploit DB Packet Storm
250398 10 危険 シスコシステムズ - Cisco Media Processing Software におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-1623 2011-12-1 11:08 2011-06-1 Show GitHub Exploit DB Packet Storm
250399 6.6 警告 シスコシステムズ - Cisco Unified IP Phones 7900 における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1603 2011-12-1 11:03 2011-06-1 Show GitHub Exploit DB Packet Storm
250400 6.6 警告 シスコシステムズ - Cisco Unified IP Phone 7900 の su ユーティリティにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1602 2011-12-1 11:03 2011-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210661 5.4 MEDIUM
Network 		opmantek open-audit Open-AudIT 3.3.0 allows an XSS attack after login. CWE-79
Cross-site Scripting 		CVE-2020-12261 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210662 7.7 HIGH
Network 		tiny_file_manager_project tiny_file_manager In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak extension) outside the scop… CWE-22
Path Traversal 		CVE-2020-12103 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210663 5.4 MEDIUM
Network 		php-fusion php-fusion An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor … CWE-79
Cross-site Scripting 		CVE-2020-12438 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210664 7.7 HIGH
Network 		tiny_file_manager_project tiny_file_manager In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the fi… CWE-22
Path Traversal 		CVE-2020-12102 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210665 6.5 MEDIUM
Network 		redhat libvirt
enterprise_linux 		An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is respons… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-12430 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210666 9.8 CRITICAL
Network 		phpgurukul online_course_registration Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_a… CWE-89
SQL Injection 		CVE-2020-12429 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210667 7.5 HIGH
Network 		openldap
debian
opensuse
canonical
netapp
broadcom
apple
oracle 		openldap
debian_linux
leap
ubuntu_linux
cloud_backup
steelstore_cloud_integrated_storage
h410c_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h5… 		In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash). CWE-674
 Uncontrolled Recursion 		CVE-2020-12243 2024-11-21 13:59 2020-04-29 Show GitHub Exploit DB Packet Storm
210668 4.3 MEDIUM
Network 		octopus octopus_deploy In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks… NVD-CWE-noinfo
CVE-2020-12286 2024-11-21 13:59 2020-04-28 Show GitHub Exploit DB Packet Storm
210669 9.8 CRITICAL
Network 		ffmpeg
canonical
debian 		ffmpeg
ubuntu_linux
debian_linux 		cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check. CWE-787
 Out-of-bounds Write 		CVE-2020-12284 2024-11-21 13:59 2020-04-28 Show GitHub Exploit DB Packet Storm
210670 8.8 HIGH
Network 		opmantek open-audit An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address t… CWE-78
OS Command  		CVE-2020-12078 2024-11-21 13:59 2020-04-28 Show GitHub Exploit DB Packet Storm