Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250671 4.3 警告 Hotaru CMS - Hotaru CMS の Search プラグイン内にある Hotaru.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4709 2011-12-13 14:52 2011-12-8 Show GitHub Exploit DB Packet Storm
250672 4.3 警告 IBM - IBM Rational Asset Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4708 2011-12-13 14:51 2011-05-5 Show GitHub Exploit DB Packet Storm
250673 4.3 警告 SAP - SAP Netweaver の Virus Scan Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4707 2011-12-13 14:50 2011-12-8 Show GitHub Exploit DB Packet Storm
250674 5 警告 Igor Sysoev - nginx におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-4315 2011-12-13 14:49 2011-11-15 Show GitHub Exploit DB Packet Storm
250675 7.5 危険 Mambo Foundation - Mambo CMS の administrator/index2.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-2917 2011-12-13 14:41 2011-12-8 Show GitHub Exploit DB Packet Storm
250676 6.8 警告 MIT Kerberos - MIT Kerberos の process_tgs_req 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1530 2011-12-13 14:40 2011-12-6 Show GitHub Exploit DB Packet Storm
250677 6.4 警告 BlackBerry - BlackBerry Administration API におけるテキストファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2011-0287 2011-12-13 14:35 2011-07-12 Show GitHub Exploit DB Packet Storm
250678 6.4 警告 Widelands - Widelands におけるパストラバーサル攻撃を誘発される脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4675 2011-12-12 18:21 2011-12-5 Show GitHub Exploit DB Packet Storm
250679 5 警告 One Click Orgs - One Click Orgs のパスワードリセット機能におけるユーザアカウントを列挙される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-4678 2011-12-12 18:19 2011-12-6 Show GitHub Exploit DB Packet Storm
250680 4 警告 One Click Orgs - One Click Orgs におけるサービス運用妨害 (ログイン障害) の脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-4555 2011-12-12 18:18 2011-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210201 7.5 HIGH
Network 		troglobit uftpd In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command. CWE-476
 NULL Pointer Dereference 		CVE-2020-14149 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210202 7.5 HIGH
Network 		barton
debian
fedoraproject 		ngircd
debian_linux
fedora 		The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function. CWE-125
Out-of-bounds Read 		CVE-2020-14148 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210203 7.7 HIGH
Network 		redislabs
oracle
suse
debian 		redis
communications_operations_monitor
linux_enterprise
debian_linux 		An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (me… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-14147 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210204 5.3 MEDIUM
Network 		pcre
apple
gitlab
oracle
netapp
splunk 		pcre
macos
gitlab
communications_cloud_native_core_policy
cloud_backup
steelstore_cloud_integrated_storage
ontap_select_deploy_administration_utility
clustered_data_ontap
acti… 		libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring. CWE-190
 Integer Overflow or Wraparound 		CVE-2020-14155 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210205 4.8 MEDIUM
Network 		mutt
canonical 		mutt
ubuntu_linux 		Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate. NVD-CWE-Other
CVE-2020-14154 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210206 7.1 HIGH
Local 		ijg libjpeg In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers. CWE-125
Out-of-bounds Read 		CVE-2020-14153 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210207 7.1 HIGH
Local 		ijg
debian 		libjpeg
debian_linux 		In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-14152 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210208 5.5 MEDIUM
Local 		gnu bison GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe… NVD-CWE-noinfo
CVE-2020-14150 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210209 9.8 CRITICAL
Network 		meetecho janus An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet. CWE-120
Classic Buffer Overflow 		CVE-2020-14034 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
210210 9.8 CRITICAL
Network 		meetecho janus An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a Buffer Overflow via a crafted RTSP server. CWE-120
Classic Buffer Overflow 		CVE-2020-14033 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm