Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250951 10 危険 Mozilla Foundation - 複数の Mozilla 製品の WebGL 実装で使用される ANGLE におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2987 2011-09-6 10:52 2011-08-16 Show GitHub Exploit DB Packet Storm
250952 10 危険 Mozilla Foundation - 複数の Mozilla 製品の WebGL shader 実装におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-2988 2011-09-6 10:51 2011-08-16 Show GitHub Exploit DB Packet Storm
250953 9.3 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2993 2011-09-6 10:50 2011-08-16 Show GitHub Exploit DB Packet Storm
250954 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2985 2011-09-5 10:54 2011-08-16 Show GitHub Exploit DB Packet Storm
250955 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンの Ogg reader におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2992 2011-09-5 10:53 2011-08-16 Show GitHub Exploit DB Packet Storm
250956 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2991 2011-09-5 10:51 2011-08-16 Show GitHub Exploit DB Packet Storm
250957 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-2989 2011-09-5 10:39 2011-08-16 Show GitHub Exploit DB Packet Storm
250958 6.9 警告 サイバートラスト株式会社
シトリックス・システムズ
レッドハット		 - Xen の tools/libxc/xc_dom_bzimageloader.c における複数の整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-1583 2011-09-2 14:27 2011-05-9 Show GitHub Exploit DB Packet Storm
250959 7.8 危険 ISC, Inc.
レッドハット		 - ISC DHCP サーバにおけるサービス運用妨害 (dhcp デーモンの停止) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2749 2011-09-2 14:26 2011-07-27 Show GitHub Exploit DB Packet Storm
250960 6.8 警告 GTK+ - GTK+ における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2010-4831 2011-09-2 12:04 2011-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210421 4.8 MEDIUM
Network 		octobercms october In October from version 1.0.319 and before version 1.0.466, a user with access to a markdown FormWidget that stores data persistently could create a stored XSS attack against themselves and any other… CWE-79
Cross-site Scripting 		CVE-2020-11083 2024-11-21 13:56 2020-07-15 Show GitHub Exploit DB Packet Storm
210422 6.1 MEDIUM
Network 		tenda ac15_firmware An XSS issue in the /goform/WifiBasicSet endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute malicious payloads via the WifiName POST parameter. CWE-79
Cross-site Scripting 		CVE-2020-10989 2024-11-21 13:56 2020-07-14 Show GitHub Exploit DB Packet Storm
210423 9.8 CRITICAL
Network 		tenda ac15_firmware A hard-coded telnet credential in the tenda_login binary of Tenda AC15 AC1900 version 15.03.05.19 allows unauthenticated remote attackers to start a telnetd service on the device. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-10988 2024-11-21 13:56 2020-07-14 Show GitHub Exploit DB Packet Storm
210424 9.8 CRITICAL
Network 		tenda ac15_firmware The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. CWE-78
OS Command  		CVE-2020-10987 2024-11-21 13:56 2020-07-14 Show GitHub Exploit DB Packet Storm
210425 6.5 MEDIUM
Network 		tenda ac15_firmware A CSRF issue in the /goform/SysToolReboot endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to reboot the device and cause denial of service via a payload hosted by an attacke… CWE-352
 Origin Validation Error 		CVE-2020-10986 2024-11-21 13:56 2020-07-14 Show GitHub Exploit DB Packet Storm
210426 7.4 HIGH
Network 		bareos
debian 		bareos
debian_linux 		In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initi… - CVE-2020-11061 2024-11-21 13:56 2020-07-11 Show GitHub Exploit DB Packet Storm
210427 8.2 HIGH
Local 		linuxfoundation osquery osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll… - CVE-2020-11081 2024-11-21 13:56 2020-07-11 Show GitHub Exploit DB Packet Storm
210428 6.5 MEDIUM
Local 		libslirp_project
redhat
canonical
debian
opensuse 		libslirp
enterprise_linux
openstack
ubuntu_linux
debian_linux
leap 		An out-of-bounds read vulnerability was found in the SLiRP networking implementation of the QEMU emulator. This flaw occurs in the icmp6_send_echoreply() routine while replying to an ICMP echo reques… CWE-125
Out-of-bounds Read 		CVE-2020-10756 2024-11-21 13:56 2020-07-10 Show GitHub Exploit DB Packet Storm
210429 6.5 MEDIUM
Network 		samba
canonical
opensuse
fedoraproject 		samba
ubuntu_linux
leap
fedora 		A use-after-free flaw was found in all samba LDAP server versions before 4.10.17, before 4.11.11, before 4.12.4 used in a AC DC configuration. A Samba LDAP user could use this flaw to crash samba. CWE-416
 Use After Free 		CVE-2020-10760 2024-11-21 13:56 2020-07-7 Show GitHub Exploit DB Packet Storm
210430 5.4 MEDIUM
Network 		prestashop prestashop In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6. CWE-79
Cross-site Scripting 		CVE-2020-11074 2024-11-21 13:56 2020-07-3 Show GitHub Exploit DB Packet Storm