Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250941 2.6 注意 OWASP - OWASP HTML Sanitizer おける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4457 2011-11-21 16:10 2011-11-17 Show GitHub Exploit DB Packet Storm
250942 7.5 危険 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-3900 2011-11-21 16:10 2011-11-16 Show GitHub Exploit DB Packet Storm
250943 4.3 警告 The phpMyAdmin Project - phpMyAdmin の simplexml_load_string 関数における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-4107 2011-11-21 16:08 2011-11-10 Show GitHub Exploit DB Packet Storm
250944 5 警告 The phpMyAdmin Project - phpMyAdmin の phpmyadmin.css.php における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3646 2011-11-21 16:08 2011-10-17 Show GitHub Exploit DB Packet Storm
250945 5 警告 Squid-cache.org - Squid の idnsGrokReply 関数におけるサービス運用妨害 (デーモンの停止) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4096 2011-11-21 16:05 2011-10-17 Show GitHub Exploit DB Packet Storm
250946 5 警告 Openswan
レッドハット		 - Openswan におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2011-3380 2011-11-21 16:04 2011-10-5 Show GitHub Exploit DB Packet Storm
250947 4.3 警告 ClamAV - ClamAV のバイトコードエンジンにおけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-189
数値処理の問題 		CVE-2011-3627 2011-11-21 16:03 2011-11-17 Show GitHub Exploit DB Packet Storm
250948 4.3 警告 Robert Luberda - man2html の man2html.cgi.c におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2770 2011-11-21 16:01 2011-11-17 Show GitHub Exploit DB Packet Storm
250949 7.5 危険 ＨＰの回し者 - ＨＰの回し者製 日記における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2011-4002 2011-11-21 12:02 2011-11-21 Show GitHub Exploit DB Packet Storm
250950 5 警告 ＨＰの回し者 - ＨＰの回し者製 日記におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-4001 2011-11-21 12:02 2011-11-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210031 7.5 HIGH
Network 		oasis-open oasis_digital_signature_services In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a valid or invalid outcome for a valid or invalid signature) via a crafted XML sign… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-13101 2024-11-21 14:00 2020-08-24 Show GitHub Exploit DB Packet Storm
210032 6.1 MEDIUM
Network 		zulip zulip_server Zulip Server before 2.1.5 allows reflected XSS via the Dropbox webhook. CWE-79
Cross-site Scripting 		CVE-2020-12759 2024-11-21 14:00 2020-08-21 Show GitHub Exploit DB Packet Storm
210033 6.1 MEDIUM
Network 		teradici pcoip_management_console Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload. CWE-79
Cross-site Scripting 		CVE-2020-13183 2024-11-21 14:00 2020-08-18 Show GitHub Exploit DB Packet Storm
210034 8.8 HIGH
Network 		noviflow noviware The novish command-line interface, included in NoviFlow NoviWare before NW500.2.12 and deployed on NoviSwitch devices, is vulnerable to command injection in the "show status destination ipaddr" comma… CWE-78
OS Command  		CVE-2020-13122 2024-11-21 14:00 2020-08-18 Show GitHub Exploit DB Packet Storm
210035 4.3 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-13286 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
210036 6.5 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a denial of service exists in the project import feature CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13281 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
210037 5.4 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting (XSS) vulnerability exists in the issue reference number tooltip. CWE-79
Cross-site Scripting 		CVE-2020-13285 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
210038 5.4 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a cross-site scripting vulnerability exists in the issues list via milestone title. CWE-79
Cross-site Scripting 		CVE-2020-13283 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
210039 3.5 LOW
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 after a group transfer occurs, members from a parent group keep their access level on the subgroup leading to improper access. CWE-281
 Improper Preservation of Permissions 		CVE-2020-13282 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm
210040 6.5 MEDIUM
Network 		gitlab gitlab For GitLab before 13.0.12, 13.1.6, 13.2.3 a memory exhaustion flaw exists due to excessive logging of an invite email error message. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13280 2024-11-21 14:00 2020-08-13 Show GitHub Exploit DB Packet Storm