Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250741	4.3	警告	オラクル	-	Oracle Database Server および Oracle Fusion Middleware における脆弱性	CWE-noinfo 情報不足	CVE-2011-2231	2011-08-1 11:31	2011-07-19	Show	GitHub Exploit DB Packet Storm

250742	10	危険	オラクル	-	Oracle Secure Backup における脆弱性	CWE-noinfo 情報不足	CVE-2011-2261	2011-08-1 11:30	2011-07-19	Show	GitHub Exploit DB Packet Storm

250743	5.1	警告	サイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAP Server の STARTTLS 実装における暗号化セッションにコマンドを挿入される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1926	2011-08-1 11:02	2011-05-23	Show	GitHub Exploit DB Packet Storm

250744	6.9	警告	GNU Project サイバートラスト株式会社レッドハット	-	bash-doc における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2008-5374	2011-08-1 10:58	2008-12-8	Show	GitHub Exploit DB Packet Storm

250745	2.1	注意	レッドハット fedorahosted.org	-	SSSD の pam_parse_in_data_v2 関数におけるサービス運用妨害 (無限ループ、クラッシュおよびログイン防止) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4341	2011-08-1 10:57	2011-01-25	Show	GitHub Exploit DB Packet Storm

250746	10	危険	rsync.samba.org アップルレッドハット	-	rsync における隠しファイルを読込/書込される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2007-6200	2011-08-1 10:54	2007-12-1	Show	GitHub Exploit DB Packet Storm

250747	7.5	危険	アップル	-	Apple Mac OS X の ICU におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0206	2011-08-1 10:44	2011-06-24	Show	GitHub Exploit DB Packet Storm

250748	6.8	警告	アップル	-	Apple Mac OS X の ImageIO におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0204	2011-08-1 10:43	2011-06-24	Show	GitHub Exploit DB Packet Storm

250749	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-0202	2011-08-1 10:41	2011-06-24	Show	GitHub Exploit DB Packet Storm

250750	7.5	危険	アップル	-	Apple Mac OS X の CoreFoundation フレームワークにおける一つずれ (off-by-one) エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-0201	2011-08-1 10:40	2011-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210941	9.8	CRITICAL Network	tecrail	responsive_filemanager	upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possible for a DNS hostname to resolve to an i…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-10212	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210942	5.4	MEDIUM Network	citrix	gateway_firmware	Citrix Gateway 11.1, 12.0, and 12.1 allows Cache Poisoning. NOTE: Citrix disputes this as not a vulnerability. By default, Citrix ADC only caches static content served under certain URL paths for Cit…	CWE-444 HTTP Request Smuggling	CVE-2020-10112	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210943	7.5	HIGH Network	citrix	gateway_firmware	Citrix Gateway 11.1, 12.0, and 12.1 has an Inconsistent Interpretation of HTTP Requests. NOTE: Citrix disputes the reported behavior as not a security issue. Citrix ADC only caches HTTP/1.1 traffic f…	CWE-444 HTTP Request Smuggling	CVE-2020-10111	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210944	5.3	MEDIUM Network	citrix	gateway_firmware	Citrix Gateway 11.1, 12.0, and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache head…	NVD-CWE-noinfo	CVE-2020-10110	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210945	7.5	HIGH Network	eset	smart_security nod32_antivirus mobile_security smart_tv_security internet_security cyber_security	ESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions before 1294 of Smart Security Premium, Internet Secu…	CWE-436 Interpretation Conflict	CVE-2020-10193	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210946	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfSer…	CWE-502 Deserialization of Untrusted Data	CVE-2020-10189	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210947	9.8	CRITICAL Network	netkit_telnet_project fedoraproject debian arista oracle juniper	netkit_telnet fedora debian_linux eos communications_performance_intelligence_center junos	utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem …	CWE-120 Classic Buffer Overflow	CVE-2020-10188	2024-11-21 13:54	2020-03-7	Show	GitHub Exploit DB Packet Storm

210948	8.6	HIGH Network	yubico	yubikey_one_time_password_validation_server	The sync endpoint in YubiKey Validation Server before 2.40 allows remote attackers to replay an OTP. NOTE: this issue is potentially relevant to persons outside Yubico who operate a self-hosted OTP v…	CWE-294 Authentication Bypass by Capture-replay	CVE-2020-10185	2024-11-21 13:54	2020-03-6	Show	GitHub Exploit DB Packet Storm

210949	7.5	HIGH Network	yubico	yubikey_one_time_password_validation_server	The verify endpoint in YubiKey Validation Server before 2.40 does not check the length of SQL queries, which allows remote attackers to cause a denial of service, aka SQL injection. NOTE: this issue …	CWE-89 SQL Injection	CVE-2020-10184	2024-11-21 13:54	2020-03-6	Show	GitHub Exploit DB Packet Storm

210950	9.8	CRITICAL Network	eset	nod32_antivirus smart_security mobile_security smart_tv_security cyber_security	The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antiviru…	CWE-436 Interpretation Conflict	CVE-2020-10180	2024-11-21 13:54	2020-03-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed