Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250781 9.3 危険 マイクロソフト - Microsoft Publisher における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3411 2011-12-16 11:31 2011-12-13 Show GitHub Exploit DB Packet Storm
250782 9.3 危険 マイクロソフト - Microsoft Publisher における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3410 2011-12-16 11:25 2011-12-13 Show GitHub Exploit DB Packet Storm
250783 9.3 危険 マイクロソフト - Microsoft Publisher 2003 および 2007 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1508 2011-12-16 11:19 2011-12-13 Show GitHub Exploit DB Packet Storm
250784 9.3 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-3397 2011-12-16 11:16 2011-12-13 Show GitHub Exploit DB Packet Storm
250785 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1983 2011-12-16 11:15 2011-12-13 Show GitHub Exploit DB Packet Storm
250786 7.2 危険 マイクロソフト - 複数の Microsoft 製品の簡体字中国語版 Microsoft Office IME における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2010 2011-12-16 11:09 2011-12-13 Show GitHub Exploit DB Packet Storm
250787 4.3 警告 Dolibarr ERP & CRM - Dolibarr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4814 2011-12-16 10:52 2011-11-3 Show GitHub Exploit DB Packet Storm
250788 6.5 警告 Dolibarr ERP & CRM - Dolibarr における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4802 2011-12-16 10:50 2011-11-3 Show GitHub Exploit DB Packet Storm
250789 4.3 警告 Jextensions - Joomla! 用 HM Community コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4809 2011-12-16 10:44 2011-12-14 Show GitHub Exploit DB Packet Storm
250790 7.5 危険 Jextensions - Joomla! 用 HM Community コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4808 2011-12-16 10:41 2011-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196551 6.4 MEDIUM
Local 		lenovo bladecenter_hs23_firmware
bladecenter_hs23e_firmware
compute_node-x440_firmware
flex_system_x220_firmware
flex_system_x240_firmware
flex_system_x440_firmware
nextscale_nx360_m4_firm… 		A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-8332 2024-11-21 14:38 2020-10-15 Show GitHub Exploit DB Packet Storm
196552 4.3 MEDIUM
Network 		nextcloud deck Missing access control in Nextcloud Deck 1.0.4 caused an insecure direct object reference allowing an attacker to view all attachments. CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-8235 2024-11-21 14:38 2020-10-5 Show GitHub Exploit DB Packet Storm
196553 5.3 MEDIUM
Network 		nextcloud
opensuse 		preferred_providers
leap
backports_sle 		A missing rate limit in the Preferred Providers app 1.7.0 allowed an attacker to set the password an uncontrolled amount of times. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-8228 2024-11-21 14:38 2020-10-5 Show GitHub Exploit DB Packet Storm
196554 6.5 MEDIUM
Network 		nextcloud
fedoraproject 		nextcloud_server
fedora 		A logic error in Nextcloud Server 19.0.0 caused a privilege escalation allowing malicious users to reshare with higher permissions than they got assigned themselves. CWE-269
 Improper Privilege Management 		CVE-2020-8223 2024-11-21 14:38 2020-10-5 Show GitHub Exploit DB Packet Storm
196555 8.0 HIGH
Network 		nextcloud deck Improper access control in Nextcloud Deck 0.8.0 allowed an attacker to reshare boards shared with them with more permissions than they had themselves. CWE-281
 Improper Preservation of Permissions 		CVE-2020-8182 2024-11-21 14:38 2020-10-5 Show GitHub Exploit DB Packet Storm
196556 7.5 HIGH
Network 		bitdefender engines A vulnerability has been discovered in the ceva_emu.cvd module that results from a lack of proper validation of user-supplied data, which can result in a pointer that is fetched from uninitialized me… CWE-824
 Access of Uninitialized Pointer 		CVE-2020-8110 2024-11-21 14:38 2020-10-2 Show GitHub Exploit DB Packet Storm
196557 7.5 HIGH
Network 		bitdefender engines A vulnerability has been discovered in the ace.xmd parser that results from a lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. This ca… CWE-787
 Out-of-bounds Write 		CVE-2020-8109 2024-11-21 14:38 2020-10-1 Show GitHub Exploit DB Packet Storm
196558 4.9 MEDIUM
Network 		pulsesecure
ivanti 		pulse_connect_secure
connect_secure 		A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to gain arbitrary file reading access through Pulse Collaboration via XML External Enti… CWE-611
XXE 		CVE-2020-8256 2024-11-21 14:38 2020-10-1 Show GitHub Exploit DB Packet Storm
196559 7.2 HIGH
Network 		pulsesecure
ivanti 		pulse_connect_secure
pulse_policy_secure
policy_secure
connect_secure 		A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform an arbitrary code execution. CWE-94
Code Injection 		CVE-2020-8243 2024-11-21 14:38 2020-10-1 Show GitHub Exploit DB Packet Storm
196560 6.1 MEDIUM
Network 		pulsesecure
ivanti 		pulse_connect_secure
pulse_policy_secure
policy_secure
connect_secure 		A vulnerability in the authenticated user web interface of Pulse Connect Secure and Pulse Policy Secure < 9.1R8.2 could allow attackers to conduct Cross-Site Scripting (XSS). CWE-79
Cross-site Scripting 		CVE-2020-8238 2024-11-21 14:38 2020-10-1 Show GitHub Exploit DB Packet Storm