Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250751	6.4	警告	ヒューレット・パッカード	-	HP OpenView Network Node Manager (OV NNM) における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-3165	2011-11-9 16:37	2011-11-1	Show	GitHub Exploit DB Packet Storm

250752	4.3	警告	株式会社アークウェブ	-	A-Form PC および PC/Mobile におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4274	2011-11-9 16:34	2011-09-30	Show	GitHub Exploit DB Packet Storm

250753	9.3	危険	シスコシステムズ	-	Cisco Small Business におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-4005	2011-11-9 16:32	2011-11-2	Show	GitHub Exploit DB Packet Storm

250754	7.8	危険	シスコシステムズ	-	複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3300	2011-11-9 16:31	2011-10-5	Show	GitHub Exploit DB Packet Storm

250755	7.8	危険	シスコシステムズ	-	複数の Cisco 製品におけるサービス運用妨害 (デバイスリロード) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3299	2011-11-9 16:30	2011-10-5	Show	GitHub Exploit DB Packet Storm

250756	7.9	危険	シスコシステムズ	-	複数の Cisco 製品における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-3298	2011-11-9 16:30	2011-10-5	Show	GitHub Exploit DB Packet Storm

250757	7.8	危険	シスコシステムズ	-	Cisco Firewall Services モジュールにおけるサービス運用妨害 (モジュールクラッシュ) の脆弱性	CWE-287 不適切な認証	CVE-2011-3297	2011-11-9 16:29	2011-10-5	Show	GitHub Exploit DB Packet Storm

250758	7.8	危険	シスコシステムズ	-	Cisco Firewall Services モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3296	2011-11-9 16:29	2011-10-5	Show	GitHub Exploit DB Packet Storm

250759	7.8	危険	シスコシステムズ	-	Cisco Unified Presence におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3288	2011-11-9 16:28	2011-09-28	Show	GitHub Exploit DB Packet Storm

250760	7.8	危険	シスコシステムズ	-	Cisco Jabber Extensible Communications Platform におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3287	2011-11-9 16:27	2011-09-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210441	7.7	HIGH Network	tiny_file_manager_project	tiny_file_manager	In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files (with .bak extension) outside the scop…	CWE-22 Path Traversal	CVE-2020-12103	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

210442	5.4	MEDIUM Network	php-fusion	php-fusion	An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor …	CWE-79 Cross-site Scripting	CVE-2020-12438	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

210443	7.7	HIGH Network	tiny_file_manager_project	tiny_file_manager	In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to enumerate directories and files on the fi…	CWE-22 Path Traversal	CVE-2020-12102	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

210444	6.5	MEDIUM Network	redhat	libvirt enterprise_linux	An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemu_driver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the virDomainListGetStats libvirt API that is respons…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-12430	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

210445	9.8	CRITICAL Network	phpgurukul	online_course_registration	Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_a…	CWE-89 SQL Injection	CVE-2020-12429	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

210446	7.5	HIGH Network	openldap debian opensuse canonical netapp broadcom apple oracle	openldap debian_linux leap ubuntu_linux cloud_backup steelstore_cloud_integrated_storage h410c_firmware h300s_firmware h500s_firmware h700s_firmware h300e_firmware h5…	In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash).	CWE-674 Uncontrolled Recursion	CVE-2020-12243	2024-11-21 13:59	2020-04-29	Show	GitHub Exploit DB Packet Storm

210447	4.3	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks…	NVD-CWE-noinfo	CVE-2020-12286	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

210448	9.8	CRITICAL Network	ffmpeg canonical debian	ffmpeg ubuntu_linux debian_linux	cbs_jpeg_split_fragment in libavcodec/cbs_jpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEG_MARKER_SOS handling because of a missing length check.	CWE-787 Out-of-bounds Write	CVE-2020-12284	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

210449	8.8	HIGH Network	opmantek	open-audit	An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address t…	CWE-78 OS Command	CVE-2020-12078	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

210450	9.8	CRITICAL Network	libgit2 debian	libgit2 debian_linux	An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. checkout.c mishandles equivalent filenames that exist because of NTFS short names. This may allow remote code execution when c…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-12279	2024-11-21 13:59	2020-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed