Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250701	5.8	警告	Kay Framework OpenID レッドハット	-	OpenID4Java の message/ax/AxMessage.java における AX 情報を変更される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4314	2012-02-1 16:26	2011-05-5	Show	GitHub Exploit DB Packet Storm

250702	9.3	危険	Google	-	Android におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3874	2012-02-1 16:24	2011-11-9	Show	GitHub Exploit DB Packet Storm

250703	7.5	危険	Kerry Thompson drusus	-	Logsurfer および Logsurfer+ におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3626	2012-02-1 16:24	2012-01-27	Show	GitHub Exploit DB Packet Storm

250704	5	警告	The Support Incident Tracker Project	-	Support Incident Tracker の translate.php における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-5075	2012-02-1 16:20	2011-11-13	Show	GitHub Exploit DB Packet Storm

250705	6.8	警告	The Support Incident Tracker Project	-	Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-5074	2012-02-1 16:18	2012-01-29	Show	GitHub Exploit DB Packet Storm

250706	5.8	警告	The Support Incident Tracker Project	-	Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5073	2012-02-1 16:18	2012-01-29	Show	GitHub Exploit DB Packet Storm

250707	7.5	危険	The Support Incident Tracker Project	-	Support Incident Tracker における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5072	2012-02-1 16:17	2012-01-29	Show	GitHub Exploit DB Packet Storm

250708	7.5	危険	The Support Incident Tracker Project	-	Support Incident Tracker における任意の PHP コードを実行可能な言語ファイルに挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4337	2012-02-1 16:17	2011-11-13	Show	GitHub Exploit DB Packet Storm

250709	7.5	危険	The Support Incident Tracker Project	-	Support Incident Tracker における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-5071	2012-02-1 16:16	2012-01-29	Show	GitHub Exploit DB Packet Storm

250710	4.3	警告	The Support Incident Tracker Project	-	Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-5070	2012-02-1 16:16	2012-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209741	9.6	CRITICAL Network	siemens	sicam_a8000_firmware	A vulnerability has been identified in SICAM WEB firmware for SICAM A8000 RTUs (All versions < V05.30). The login screen does not sufficiently sanitize input, which enables an attacker to generate sp…	CWE-79 Cross-site Scripting	CVE-2020-15781	2024-11-21 14:06	2020-08-15	Show	GitHub Exploit DB Packet Storm

209742	7.2	HIGH Network	geutebrueck	g-cam_ebc-2110_firmware g-cam_ebc-2111_firmware g-cam_efd-2240_firmware g-cam_efd-2241_firmware g-cam_efd-2250_firmware g-cam_ethc-2230_firmware g-cam_ethc-2239_firmware g-cam_et…	Using a specially crafted URL command, a remote authenticated user can execute commands as root on the G-Cam and G-Code (Firmware Versions 1.12.0.25 and prior as well as the limited Versions 1.12.13.…	CWE-78 OS Command	CVE-2020-16205	2024-11-21 14:06	2020-08-14	Show	GitHub Exploit DB Packet Storm

209743	8.8	HIGH Network	loway	queuemetrics	A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId …	CWE-89 SQL Injection	CVE-2020-15947	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209744	8.8	HIGH Network	loway	queuemetrics	A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter.	CWE-89 SQL Injection	CVE-2020-15925	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209745	8.6	HIGH Local	vng	zalo_desktop	An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafte…	CWE-74 Injection	CVE-2020-16087	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209746	7.5	HIGH Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2020-15868	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209747	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove …	NVD-CWE-noinfo	CVE-2020-16139	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209748	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vul…	NVD-CWE-noinfo	CVE-2020-16138	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209749	9.8	CRITICAL Network	cisco	unified_ip_conference_station_7937g_firmware	A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Not…	NVD-CWE-noinfo	CVE-2020-16137	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

209750	6.1	MEDIUM Network	roundcube fedoraproject	webmail fedora	Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15.	CWE-79 Cross-site Scripting	CVE-2020-16145	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed