Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250431	6.2	警告	Fedora Project レッドハット	-	389 Directory Server のバックアップおよび復旧スクリプトにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0532	2012-03-27 18:42	2011-02-23	Show	GitHub Exploit DB Packet Storm

250432	9.3	危険	VideoLAN	-	VideoLAN VLC media player の demux/mkv/mkv.hpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0531	2012-03-27 18:42	2011-01-26	Show	GitHub Exploit DB Packet Storm

250433	7.5	危険	Wouter Verhelst	-	nbd の nbd-server.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0530	2012-03-27 18:42	2011-02-22	Show	GitHub Exploit DB Packet Storm

250434	5	警告	VMware	-	VMware の vFabric tc Server におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2011-0527	2012-03-27 18:42	2011-08-11	Show	GitHub Exploit DB Packet Storm

250435	4.3	警告	Vanilla Forums	-	Vanilla Forums の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0526	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

250436	6.8	警告	VideoLAN	-	VideoLAN VLC メディアプレイヤーの StripTags 関数における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0522	2012-03-27 18:42	2011-02-7	Show	GitHub Exploit DB Packet Storm

250437	7.5	危険	MaraDNS	-	MaraDNS の compress_add_dlabel_points 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0520	2012-03-27 18:42	2011-01-28	Show	GitHub Exploit DB Packet Storm

250438	7.5	危険	gallarific	-	Gallarific PHP Photo Gallery script の gallery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0519	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250439	5.1	警告	lotuscms	-	LotusCMS Fraise の core/lib/router.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-0518	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

250440	7.5	危険	epromptc	-	E-PROMPT C BetMore Site Suite における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-0516	2012-03-27 18:42	2011-01-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209151	6.1	MEDIUM Network	chamber_dashboard_business_directory_project	chamber_dashboard_business_directory	The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-24699	2024-11-21 14:15	2020-09-1	Show	GitHub Exploit DB Packet Storm

209152	9.8	CRITICAL Network	scalyr	scalyr_agent	The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltNa…	CWE-295 Improper Certificate Validation	CVE-2020-24715	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209153	9.8	CRITICAL Network	scalyr	scalyr_agent	The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.	CWE-295 Improper Certificate Validation	CVE-2020-24714	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209154	6.5	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.	NVD-CWE-noinfo	CVE-2020-24618	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209155	7.8	HIGH Local	openzfs	openzfs	OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.	CWE-276 Incorrect Default Permissions	CVE-2020-24717	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209156	7.8	HIGH Local	openzfs	openzfs	OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.	CWE-863 Incorrect Authorization	CVE-2020-24716	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209157	6.1	MEDIUM Network	wso2	identity_server_analytics identity_server_as_key_manager identity_server api_manager api_manager_analytics iot_server	An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity…	CWE-79 Cross-site Scripting	CVE-2020-24706	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209158	8.8	HIGH Network	wso2	identity_server_analytics identity_server_as_key_manager identity_server api_manager api_manager_analytics iot_server	An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Ses…	NVD-CWE-noinfo	CVE-2020-24705	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209159	6.1	MEDIUM Network	wso2	identity_server enterprise_integrator api_microgateway api_manager_analytics iot_server identity_server_analytics data_analytics_server identity_server_as_key_manager api_mana…	An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager 2.2.0, API Manager Analytics 2.2.0, API Microgateway 2.2.0, Data Analytics Server 3.2.…	CWE-79 Cross-site Scripting	CVE-2020-24704	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

209160	8.8	HIGH Network	wso2	identity_server enterprise_integrator api_microgateway api_manager_analytics iot_server identity_server_analytics data_analytics_server identity_server_as_key_manager api_mana…	An issue was discovered in certain WSO2 products. A valid Carbon Management Console session cookie may be sent to an attacker-controlled server if the victim submits a crafted Try It request, aka Ses…	NVD-CWE-noinfo	CVE-2020-24703	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm