Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250851 7.8 危険 シスコシステムズ - Cisco TelePresence Multipoint Switch デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0389 2011-11-29 10:32 2011-02-23 Show GitHub Exploit DB Packet Storm
250852 7.8 危険 シスコシステムズ - Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 CWE-399
リソース管理の問題 		CVE-2011-0388 2011-11-29 10:31 2011-02-23 Show GitHub Exploit DB Packet Storm
250853 8 危険 シスコシステムズ - Cisco TelePresence Multipoint Switch (CTMS) デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0387 2011-11-29 10:31 2011-02-23 Show GitHub Exploit DB Packet Storm
250854 9.3 危険 シスコシステムズ - Cisco TelePresence Recording Server 上の XML-RPC の実装におけるファイルを上書きされる脆弱性 CWE-94
コード・インジェクション 		CVE-2011-0386 2011-11-29 10:30 2011-02-23 Show GitHub Exploit DB Packet Storm
250855 10 危険 シスコシステムズ - Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 CWE-Other
その他 		CVE-2011-0385 2011-11-29 10:29 2011-02-23 Show GitHub Exploit DB Packet Storm
250856 10 危険 シスコシステムズ - Cisco TelePresence Multipoint Switch における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2011-0384 2011-11-29 10:28 2011-02-23 Show GitHub Exploit DB Packet Storm
250857 10 危険 シスコシステムズ - Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 CWE-287
不適切な認証 		CVE-2011-0383 2011-11-29 10:27 2011-02-23 Show GitHub Exploit DB Packet Storm
250858 10 危険 シスコシステムズ - Cisco TelePresence Recording Server における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0382 2011-11-29 09:55 2011-02-23 Show GitHub Exploit DB Packet Storm
250859 10 危険 シスコシステムズ - Cisco TelePresence Manager における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-0381 2011-11-29 09:55 2011-02-23 Show GitHub Exploit DB Packet Storm
250860 7.5 危険 シスコシステムズ - Cisco TelePresence Manager における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2011-0380 2011-11-29 09:54 2011-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196611 9.8 CRITICAL
Network 		gulp-scss-lint_project gulp-scss-lint gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options. CWE-78
OS Command  		CVE-2020-7601 2024-11-21 14:37 2020-03-16 Show GitHub Exploit DB Packet Storm
196612 5.3 MEDIUM
Network 		querymen_project querymen querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanitization. This could be abused… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7600 2024-11-21 14:37 2020-03-13 Show GitHub Exploit DB Packet Storm
196613 5.6 MEDIUM
Network 		substack
opensuse 		minimist
leap 		minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-7598 2024-11-21 14:37 2020-03-12 Show GitHub Exploit DB Packet Storm
196614 6.1 MEDIUM
Network 		siemens spectrum_power_5 A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a … CWE-79
Cross-site Scripting 		CVE-2020-7579 2024-11-21 14:37 2020-03-11 Show GitHub Exploit DB Packet Storm
196615 7.5 HIGH
Network 		jetbrains scala In the JetBrains Scala plugin before 2019.2.1, some artefact dependencies were resolved over unencrypted connections. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-7907 2024-11-21 14:37 2020-02-22 Show GitHub Exploit DB Packet Storm
196616 9.8 CRITICAL
Network 		synacor zimbra_collaboration_suite Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-7796 2024-11-21 14:37 2020-02-19 Show GitHub Exploit DB Packet Storm
196617 9.8 CRITICAL
Network 		freebsd freebsd In FreeBSD 12.1-STABLE before r357213, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r357214, and 11.3-RELEASE before 11.3-RELEASE-p6, URL handling in … CWE-787
 Out-of-bounds Write 		CVE-2020-7450 2024-11-21 14:37 2020-02-19 Show GitHub Exploit DB Packet Storm
196618 8.8 HIGH
Network 		codecov codecov codecov-node npm module before 3.6.5 allows remote attackers to execute arbitrary commands.The value provided as part of the gcov-root argument is executed by the exec function within lib/codecov.js.… CWE-78
OS Command  		CVE-2020-7597 2024-11-21 14:37 2020-02-18 Show GitHub Exploit DB Packet Storm
196619 9.8 CRITICAL
Network 		djangoproject django Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data … CWE-89
SQL Injection 		CVE-2020-7471 2024-11-21 14:37 2020-02-3 Show GitHub Exploit DB Packet Storm
196620 6.1 MEDIUM
Network 		jetbrains youtrack JetBrains YouTrack 2019.2 before 2019.2.59309 was vulnerable to XSS via an issue description. CWE-79
Cross-site Scripting 		CVE-2020-7913 2024-11-21 14:37 2020-01-31 Show GitHub Exploit DB Packet Storm