Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251031	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1993	2011-10-21 15:34	2011-10-11	Show	GitHub Exploit DB Packet Storm

251032	7.2	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2005	2011-10-21 15:34	2011-10-11	Show	GitHub Exploit DB Packet Storm

251033	5	警告	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2012	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

251034	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-1969	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

251035	4.3	警告	マイクロソフト	-	Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1897	2011-10-21 15:30	2011-10-11	Show	GitHub Exploit DB Packet Storm

251036	4.3	警告	マイクロソフト	-	Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1896	2011-10-21 15:30	2011-10-11	Show	GitHub Exploit DB Packet Storm

251037	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-1895	2011-10-21 15:28	2011-10-11	Show	GitHub Exploit DB Packet Storm

251038	9.3	危険	マイクロソフト	-	Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1253	2011-10-21 15:27	2011-10-11	Show	GitHub Exploit DB Packet Storm

251039	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2011	2011-10-21 15:26	2011-10-11	Show	GitHub Exploit DB Packet Storm

251040	9.3	危険	マイクロソフト	-	Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2003	2011-10-21 15:25	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196561	6.5	MEDIUM Network	avaya	aura_system_manager weblm	An XML external entity (XXE) vulnerability in Avaya WebLM admin interface allows authenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in…	CWE-611 XXE	CVE-2020-7032	2024-11-21 14:36	2020-11-13	Show	GitHub Exploit DB Packet Storm

196562	5.4	MEDIUM Network	avaya	equinox_conferencing	A Cross Site Scripting (XSS) Vulnerability on the Unified Portal Client (web client) used in Avaya Equinox Conferencing can allow an authenticated user to perform XSS attacks. The affected versions o…	CWE-79 Cross-site Scripting	CVE-2020-7033	2024-11-21 14:36	2020-11-13	Show	GitHub Exploit DB Packet Storm

196563	8.8	HIGH Network	hp	oneview synergy_composer_2 synergy_composer	There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to…	NVD-CWE-noinfo	CVE-2020-7198	2024-11-21 14:36	2020-11-7	Show	GitHub Exploit DB Packet Storm

196564	8.8	HIGH Network	zte	zxa10_eodn_firmware	A ZTE product is impacted by an information leak vulnerability. An attacker could use this vulnerability to obtain the authentication password of the handheld terminal and access the device illegally…	NVD-CWE-noinfo	CVE-2020-6877	2024-11-21 14:36	2020-11-6	Show	GitHub Exploit DB Packet Storm

196565	6.8	MEDIUM Physics	hp	apollo_2000_firmware apollo_4200_gen10_firmware apollo_4500_firmware proliant_xl230k_gen10_firmware proliant_xl270d_gen10_firmware proliant_bl460c_gen10_firmware proliant_dl120_gen1…	A local elevation of privilege using physical access security vulnerability was found in HPE Proliant Gen10 Servers using Intel Innovation Engine (IE). This attack requires a physical attack to the s…	NVD-CWE-noinfo	CVE-2020-7207	2024-11-21 14:36	2020-11-6	Show	GitHub Exploit DB Packet Storm

196566	7.2	HIGH Network	arubanetworks	airwave_glass	A remote execution of arbitrary commands vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.	NVD-CWE-noinfo	CVE-2020-7129	2024-11-21 14:36	2020-11-5	Show	GitHub Exploit DB Packet Storm

196567	9.8	CRITICAL Network	arubanetworks	airwave_glass	A remote unauthenticated arbitrary code execution vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2.	CWE-306 Missing Authentication for Critical Function	CVE-2020-7128	2024-11-21 14:36	2020-11-5	Show	GitHub Exploit DB Packet Storm

196568	5.3	MEDIUM Network	mozilla	firefox	When performing EC scalar point multiplication, the wNAF point multiplication algorithm was used; which leaked partial information about the nonce used during signature generation. Given an electro-m…	NVD-CWE-noinfo	CVE-2020-6829	2024-11-21 14:36	2020-10-28	Show	GitHub Exploit DB Packet Storm

196569	9.8	CRITICAL Network	hp	storeserv_management_console	SSMC3.7.0.0 is vulnerable to remote authentication bypass. HPE StoreServ Management Console (SSMC) 3.7.0.0 is an off node multiarray manager web application and remains isolated from data on the mana…	CWE-287 Improper Authentication	CVE-2020-7197	2024-11-21 14:36	2020-10-27	Show	GitHub Exploit DB Packet Storm

196570	6.5	MEDIUM Network	hp	ezmeral_container_platform bluedata_epic	The HPE BlueData EPIC Software Platform version 4.0 and HPE Ezmeral Container Platform 5.0 use an insecure method of handling sensitive Kerberos passwords that is susceptible to unauthorized intercep…	CWE-200 CWE-522 Information Exposure Insufficiently Protected Credentials	CVE-2020-7196	2024-11-21 14:36	2020-10-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed