Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250581	7.2	危険	マイクロソフト	-	複数の Microsoft Windows のカーネルにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2018	2011-12-16 11:49	2011-12-13	Show	GitHub Exploit DB Packet Storm

250582	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer 8 の XSS フィルタにおけるコンテンツを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1992	2011-12-16 11:48	2011-12-13	Show	GitHub Exploit DB Packet Storm

250583	9.3	危険	マイクロソフト	-	Microsoft Excel および Office における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3403	2011-12-16 11:40	2011-12-13	Show	GitHub Exploit DB Packet Storm

250584	9	危険	マイクロソフト	-	Microsoft Windows におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3406	2011-12-16 11:38	2011-12-13	Show	GitHub Exploit DB Packet Storm

250585	9.3	危険	マイクロソフト	-	複数の Microsoft PowerPoint 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3413	2011-12-16 11:37	2011-12-13	Show	GitHub Exploit DB Packet Storm

250586	9.3	危険	マイクロソフト	-	Microsoft PowerPoint 2007 および 2010 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-3396	2011-12-16 11:36	2011-12-13	Show	GitHub Exploit DB Packet Storm

250587	9.3	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3400	2011-12-16 11:35	2011-12-13	Show	GitHub Exploit DB Packet Storm

250588	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品の ENCDEC.DLL における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3401	2011-12-16 11:34	2011-12-13	Show	GitHub Exploit DB Packet Storm

250589	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3412	2011-12-16 11:32	2011-12-13	Show	GitHub Exploit DB Packet Storm

250590	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3411	2011-12-16 11:31	2011-12-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210431	4.7	MEDIUM Local	mozilla	firefox	When converting coordinates from projective to affine, the modular inversion was not performed in constant time, resulting in a possible timing-based side channel attack. This vulnerability affects F…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-12400	2024-11-21 13:59	2020-10-8	Show	GitHub Exploit DB Packet Storm

210432	7.8	HIGH Local	intel	driver_\&_support_assistant	Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user to potentially enable escalation of privilege via local access.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-12302	2024-11-21 13:59	2020-10-5	Show	GitHub Exploit DB Packet Storm

210433	7.5	HIGH Network	wavlink	wn530h4_firmware	An information disclosure vulnerability in the /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to leak router settings, including cleartext login d…	CWE-306 Missing Authentication for Critical Function	CVE-2020-12127	2024-11-21 13:59	2020-10-2	Show	GitHub Exploit DB Packet Storm

210434	9.8	CRITICAL Network	wavlink	wn530h4_firmware	Multiple authentication bypass vulnerabilities in the /cgi-bin/ endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to leak router settings, change configuration variables, and cause…	CWE-287 Improper Authentication	CVE-2020-12126	2024-11-21 13:59	2020-10-2	Show	GitHub Exploit DB Packet Storm

210435	9.8	CRITICAL Network	wavlink	wn530h4_firmware	A remote buffer overflow vulnerability in the /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary machine instructions as root without …	CWE-120 Classic Buffer Overflow	CVE-2020-12125	2024-11-21 13:59	2020-10-2	Show	GitHub Exploit DB Packet Storm

210436	9.8	CRITICAL Network	wavlink	wn530h4_firmware	A remote command-line injection vulnerability in the /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 M30H4.V5030.190403 allows an attacker to execute arbitrary Linux commands as root without au…	CWE-78 OS Command	CVE-2020-12124	2024-11-21 13:59	2020-10-2	Show	GitHub Exploit DB Packet Storm

210437	8.1	HIGH Network	wavlink	wn530h4_firmware	CSRF vulnerabilities in the /cgi-bin/ directory of the WAVLINK WN530H4 M30H4.V5030.190403 allow an attacker to remotely access router endpoints, because these endpoints do not contain CSRF tokens. If…	CWE-352 Origin Validation Error	CVE-2020-12123	2024-11-21 13:59	2020-10-2	Show	GitHub Exploit DB Packet Storm

210438	7.5	HIGH Network	apache gradle fedoraproject oracle	ant gradle fedora flexcube_private_banking primavera_unifier banking_platform api_gateway enterprise_repository retail_predictive_application_server data_integrator util…	As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task delete…	NVD-CWE-Other	CVE-2020-11979	2024-11-21 13:59	2020-10-2	Show	GitHub Exploit DB Packet Storm

210439	9.1	CRITICAL Network	wago	750-852_firmware 750-880_firmware 750-881_firmware 750-831_firmware 750-882_firmware 750-885_firmware 750-889_firmware	Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW07 allows an attacker to change some special parameters without authentication. This issue affects: WAGO 750-852, WAG…	-	CVE-2020-12505	2024-11-21 13:59	2020-10-1	Show	GitHub Exploit DB Packet Storm

210440	9.1	CRITICAL Network	wago	750-362_firmware 750-363_firmware 750-823_firmware 750-832_firmware 750-862_firmware 750-891_firmware 750-890_firmware	Improper Authentication vulnerability in WAGO 750-8XX series with FW version <= FW03 allows an attacker to change the settings of the devices by sending specifically constructed requests without auth…	-	CVE-2020-12506	2024-11-21 13:59	2020-10-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed