Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250941	1.7	注意	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2311	2011-10-27 09:49	2011-10-18	Show	GitHub Exploit DB Packet Storm

250942	4.3	警告	オラクル	-	Oracle Solaris における libnsl の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2304	2011-10-27 09:49	2011-10-18	Show	GitHub Exploit DB Packet Storm

250943	2.4	注意	オラクル	-	Oracle Solaris における xscreensaver の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2292	2011-10-27 09:48	2011-10-18	Show	GitHub Exploit DB Packet Storm

250944	2.1	注意	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2286	2011-10-27 09:47	2011-10-18	Show	GitHub Exploit DB Packet Storm

250945	7.8	危険	オラクル	-	Oracle Sun Products Suite の複数の製品における Web Container の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3559	2011-10-26 16:43	2011-10-18	Show	GitHub Exploit DB Packet Storm

250946	6.5	警告	オラクル	-	Oracle Database Server の Application Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3525	2011-10-26 16:42	2011-10-18	Show	GitHub Exploit DB Packet Storm

250947	5.5	警告	オラクル	-	Oracle Database Server の Core RDBMS コンポーネントおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3512	2011-10-26 16:42	2011-10-18	Show	GitHub Exploit DB Packet Storm

250948	3.6	注意	オラクル	-	Oracle Database Server の Database Vault コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3511	2011-10-26 16:40	2011-10-18	Show	GitHub Exploit DB Packet Storm

250949	3.6	注意	オラクル	-	Oracle Database Server の Database Vault コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2322	2011-10-26 16:40	2011-10-18	Show	GitHub Exploit DB Packet Storm

250950	4.1	警告	オラクル	-	Oracle Database Server の Oracle Text コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2301	2011-10-26 16:39	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196751	8.8	HIGH Network	topmanage	olk_webstore	In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.	CWE-352 Origin Validation Error	CVE-2020-6844	2024-11-21 14:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

196752	6.1	MEDIUM Network	miniorange	saml_sp_single_sign_on	Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayStat…	CWE-79 Cross-site Scripting	CVE-2020-6850	2024-11-21 14:36	2020-02-18	Show	GitHub Exploit DB Packet Storm

196753	5.5	MEDIUM Local	mcafee	data_exchange_layer	Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via careful…	CWE-428 Unquoted Search Path or Element	CVE-2020-7252	2024-11-21 14:36	2020-02-17	Show	GitHub Exploit DB Packet Storm

196754	5.4	MEDIUM Network	codologic	codoforum	Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is op…	CWE-79 CWE-732 Cross-site Scripting Incorrect Permission Assignment for Critical Resource	CVE-2020-7050	2024-11-21 14:36	2020-02-16	Show	GitHub Exploit DB Packet Storm

196755	5.5	MEDIUM Local	mcafee	endpoint_security	Improper access control vulnerability in Configuration Tool in McAfee Mcafee Endpoint Security (ENS) Prior to 10.6.1 February 2020 Update allows local users to disable security features via unauthori…	CWE-863 Incorrect Authorization	CVE-2020-7251	2024-11-21 14:36	2020-02-15	Show	GitHub Exploit DB Packet Storm

196756	6.1	MEDIUM Network	codologic	codoforum	Codologic Codoforum through 4.8.4 allows stored XSS in the login area. This is relevant in conjunction with CVE-2020-5842 because session cookies lack the HttpOnly flag. The impact is account takeove…	CWE-79 CWE-732 Cross-site Scripting Incorrect Permission Assignment for Critical Resource	CVE-2020-7051	2024-11-21 14:36	2020-02-14	Show	GitHub Exploit DB Packet Storm

196757	9.8	CRITICAL Network	hp	linuxki	LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2.	NVD-CWE-noinfo	CVE-2020-7209	2024-11-21 14:36	2020-02-13	Show	GitHub Exploit DB Packet Storm

196758	6.1	MEDIUM Network	hp	linuxki	LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.	CWE-79 Cross-site Scripting	CVE-2020-7208	2024-11-21 14:36	2020-02-13	Show	GitHub Exploit DB Packet Storm

196759	6.2	MEDIUM Network	digi	connectport_lts_32_mei_bios connectport_lts_32_mei_firmware	Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Multiple cross-site scripting vulnerabilities exist that could allow an attacker to cause …	CWE-79 Cross-site Scripting	CVE-2020-6973	2024-11-21 14:36	2020-02-13	Show	GitHub Exploit DB Packet Storm

196760	4.9	MEDIUM Network	digi	connectport_lts_32_mei_bios connectport_lts_32_mei_firmware	Digi International ConnectPort LTS 32 MEI, Firmware Version 1.4.3 (82002228_K 08/09/2018), bios Version 1.2. Successful exploitation of this vulnerability could allow an attacker to upload a maliciou…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-6975	2024-11-21 14:36	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed