Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250611	5.8	警告	Mono Project Novell	-	Mono の FastCopy 最適化におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2011-0990	2012-03-27 18:43	2011-04-13	Show	GitHub Exploit DB Packet Storm

250612	5.8	警告	Mono Project Novell	-	Mono の RuntimeHelpers.InitializeArray メソッドにおける読取り専用の内部データ構造を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0989	2012-03-27 18:43	2011-04-13	Show	GitHub Exploit DB Packet Storm

250613	4.4	警告	Novell pureftpd	-	SUSE Linux Enterprise Server で使用される pure-ftpd における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0988	2012-03-27 18:43	2011-04-18	Show	GitHub Exploit DB Packet Storm

250614	6.5	警告	The phpMyAdmin Project	-	phpMyAdmin の PMA_Bookmark_get 関数における別のユーザの SQL クエリの実行を誘発する脆弱性	CWE-20 不適切な入力確認	CVE-2011-0987	2012-03-27 18:43	2011-02-11	Show	GitHub Exploit DB Packet Storm

250615	5	警告	The phpMyAdmin Project	-	phpMyAdmin におけるインストレーションパスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0986	2012-03-27 18:43	2011-02-8	Show	GitHub Exploit DB Packet Storm

250616	10	危険	BMC Software	-	Performance Analysis for Server などの BMC PATROL Agent Service Daemon におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0975	2012-03-27 18:43	2011-02-10	Show	GitHub Exploit DB Packet Storm

250617	10	危険	ヒューレット・パッカード	-	HP Data Protector のクライアントにおける任意のスクリプトコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0924	2012-03-27 18:43	2011-02-8	Show	GitHub Exploit DB Packet Storm

250618	10	危険	ヒューレット・パッカード	-	HP Data Protector のクライアントにおける任意の Perl コードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0923	2012-03-27 18:43	2011-02-8	Show	GitHub Exploit DB Packet Storm

250619	10	危険	ヒューレット・パッカード	-	HP Data Protector のクライアントにおける任意のプログラムを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0922	2012-03-27 18:43	2011-02-8	Show	GitHub Exploit DB Packet Storm

250620	10	危険	ヒューレット・パッカード	-	HP Data Protector の crs.exe における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0921	2012-03-27 18:43	2011-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209001	5.4	MEDIUM Network	qdpm	qdpm	The file upload functionality in qdPM 9.1 doesn't check the file description, which allows remote authenticated attackers to inject web script or HTML via the attachments info parameter, aka XSS. Thi…	CWE-79 Cross-site Scripting	CVE-2020-26166	2024-11-21 14:19	2020-10-5	Show	GitHub Exploit DB Packet Storm

209002	6.1	MEDIUM Network	livehelperchat	live_helper_chat	Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO.	CWE-79 Cross-site Scripting	CVE-2020-26135	2024-11-21 14:19	2020-10-2	Show	GitHub Exploit DB Packet Storm

209003	6.1	MEDIUM Network	livehelperchat	live_helper_chat	Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode.	CWE-79 Cross-site Scripting	CVE-2020-26134	2024-11-21 14:19	2020-10-2	Show	GitHub Exploit DB Packet Storm

209004	8.8	HIGH Network	openmediavault	openmediavault	openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.php, because json_encode_safe is not used in config/databas…	CWE-94 Code Injection	CVE-2020-26124	2024-11-21 14:19	2020-10-2	Show	GitHub Exploit DB Packet Storm

209005	5.5	MEDIUM Local	artifex debian fedoraproject	mupdf debian_linux fedora	Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service.	CWE-787 Out-of-bounds Write	CVE-2020-26519	2024-11-21 14:19	2020-10-2	Show	GitHub Exploit DB Packet Storm

209006	9.8	CRITICAL Network	artica	pandora_fms	Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/include/chart_generator.php session_id parameter.	CWE-89 SQL Injection	CVE-2020-26518	2024-11-21 14:19	2020-10-2	Show	GitHub Exploit DB Packet Storm

209007	7.5	HIGH Network	wpo365	wordpress_\+_azure_ad_\/_microsoft_office_365	The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass.	CWE-287 Improper Authentication	CVE-2020-26511	2024-11-21 14:19	2020-10-2	Show	GitHub Exploit DB Packet Storm

209008	9.8	CRITICAL Network	websitebaker	websitebaker	WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access …	CWE-89 SQL Injection	CVE-2020-25990	2024-11-21 14:19	2020-10-1	Show	GitHub Exploit DB Packet Storm

209009	8.8	HIGH Network	bigbluebutton	greenlight	BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link.	NVD-CWE-Other	CVE-2020-26163	2024-11-21 14:19	2020-10-1	Show	GitHub Exploit DB Packet Storm

209010	7.5	HIGH Network	jwt-go_project	jwt-go	jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fai…	CWE-287 CWE-755 Improper Authentication Improper Handling of Exceptional Conditions	CVE-2020-26160	2024-11-21 14:19	2020-10-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed