Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250541	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の simplexml_load_string 関数における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-4107	2011-11-21 16:08	2011-11-10	Show	GitHub Exploit DB Packet Storm

250542	5	警告	The phpMyAdmin Project	-	phpMyAdmin の phpmyadmin.css.php における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3646	2011-11-21 16:08	2011-10-17	Show	GitHub Exploit DB Packet Storm

250543	5	警告	Squid-cache.org	-	Squid の idnsGrokReply 関数におけるサービス運用妨害 (デーモンの停止) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4096	2011-11-21 16:05	2011-10-17	Show	GitHub Exploit DB Packet Storm

250544	5	警告	Openswan レッドハット	-	Openswan におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-3380	2011-11-21 16:04	2011-10-5	Show	GitHub Exploit DB Packet Storm

250545	4.3	警告	ClamAV	-	ClamAV のバイトコードエンジンにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-189 数値処理の問題	CVE-2011-3627	2011-11-21 16:03	2011-11-17	Show	GitHub Exploit DB Packet Storm

250546	4.3	警告	Robert Luberda	-	man2html の man2html.cgi.c におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2770	2011-11-21 16:01	2011-11-17	Show	GitHub Exploit DB Packet Storm

250547	7.5	危険	ＨＰの回し者	-	ＨＰの回し者製日記における OS コマンドインジェクションの脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2011-4002	2011-11-21 12:02	2011-11-21	Show	GitHub Exploit DB Packet Storm

250548	5	警告	ＨＰの回し者	-	ＨＰの回し者製日記におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4001	2011-11-21 12:02	2011-11-21	Show	GitHub Exploit DB Packet Storm

250549	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-119 バッファエラー	CVE-2011-2794	2011-11-21 12:00	2011-08-2	Show	GitHub Exploit DB Packet Storm

250550	4.3	警告	Google	-	Android におけるクロスアプリケーションスクリプティングの脆弱性	CWE-20 不適切な入力確認	CVE-2011-2357	2011-11-21 11:57	2011-08-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210511	6.5	MEDIUM Network	mozilla	firefox	Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the u…	CWE-125 Out-of-bounds Read	CVE-2020-12407	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210512	8.8	HIGH Network	mozilla canonical	thunderbird firefox firefox_esr ubuntu_linux	Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary cod…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-12406	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210513	5.3	MEDIUM Network	mozilla canonical	thunderbird firefox firefox_esr ubuntu_linux	When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2020-12405	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210514	4.3	MEDIUM Network	mozilla	firefox	For native-to-JS bridging the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token could leak when used for downloading files. This vulnera…	CWE-79 Cross-site Scripting	CVE-2020-12404	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210515	4.4	MEDIUM Local	mozilla opensuse fedoraproject debian	firefox leap fedora debian_linux	During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow. This allowed an attacker able to perfo…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-12402	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210516	4.4	MEDIUM Local	mozilla debian	thunderbird firefox firefox_esr debian_linux	NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys. This vulnerability affects Thunderbird < 68.9.0, Firefox < 77, and Firef…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-12399	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210517	7.5	HIGH Network	mozilla canonical	thunderbird ubuntu_linux	If Thunderbird is configured to use STARTTLS for an IMAP server, and the server sends a PREAUTH response, then Thunderbird will continue with an unencrypted connection, causing email data to be sent …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-12398	2024-11-21 13:59	2020-07-10	Show	GitHub Exploit DB Packet Storm

210518	6.5	MEDIUM Network	mozilla opensuse	firefox leap	When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission;…	CWE-276 Incorrect Default Permissions	CVE-2020-12424	2024-11-21 13:59	2020-07-9	Show	GitHub Exploit DB Packet Storm

210519	7.5	HIGH Network	apache oracle	camel enterprise_repository enterprise_manager_base_platform communications_diameter_signaling_router	Server-Side Template Injection and arbitrary file disclosure on Camel templating components	CWE-74 Injection	CVE-2020-11994	2024-11-21 13:59	2020-07-9	Show	GitHub Exploit DB Packet Storm

210520	8.1	HIGH Network	ledger	ledger_live	Ledger Live before 2.7.0 does not handle Bitcoin's Replace-By-Fee (RBF). It increases the user's balance with the value of an unconfirmed transaction as soon as it is received (before the transaction…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-12119	2024-11-21 13:59	2020-07-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed