Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251061	7.6	危険	アップル	-	Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2354	2011-10-21 11:43	2011-10-12	Show	GitHub Exploit DB Packet Storm

251062	7.6	危険	アップル	-	Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2352	2011-10-21 11:42	2011-10-12	Show	GitHub Exploit DB Packet Storm

251063	7.6	危険	アップル	-	Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2341	2011-10-21 11:42	2011-10-12	Show	GitHub Exploit DB Packet Storm

251064	7.6	危険	アップル	-	Apple iTunes で使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2339	2011-10-21 11:41	2011-10-12	Show	GitHub Exploit DB Packet Storm

251065	4.3	警告	マイクロソフト	-	複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1893	2011-10-20 16:20	2011-09-13	Show	GitHub Exploit DB Packet Storm

251066	9.3	危険	マイクロソフト	-	Microsoft Office 2003 および 2007 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1980	2011-10-20 16:19	2011-09-13	Show	GitHub Exploit DB Packet Storm

251067	9.3	危険	マイクロソフト	-	Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1982	2011-10-20 16:19	2011-09-13	Show	GitHub Exploit DB Packet Storm

251068	7.2	危険	マイクロソフト	-	Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性性	CWE-264 認可・権限・アクセス制御	CVE-2011-1984	2011-10-20 16:19	2011-09-13	Show	GitHub Exploit DB Packet Storm

251069	9.3	危険	マイクロソフト	-	Microsoft Excel 2003 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1986	2011-10-20 16:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

251070	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1987	2011-10-20 16:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210041	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mec…	CWE-668 CWE-276 Exposure of Resource to Wrong Sphere Incorrect Default Permissions	CVE-2020-13240	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210042	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.	CWE-79 Cross-site Scripting	CVE-2020-13239	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

210043	6.5	MEDIUM Network	cacti fedoraproject	cacti fedora	In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.	CWE-352 Origin Validation Error	CVE-2020-13231	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210044	4.3	MEDIUM Network	cacti debian fedoraproject	cacti debian_linux fedora	In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).	CWE-281 Improper Preservation of Permissions	CVE-2020-13230	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210045	5.5	MEDIUM Local	kde	amarok	A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time,…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-13152	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210046	9.8	CRITICAL Network	smartbear	readyapi	An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into th…	CWE-502 Deserialization of Untrusted Data	CVE-2020-12835	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210047	9.8	CRITICAL Network	wso2	api_manager	WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-13226	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210048	4.8	MEDIUM Network	phpipam	phpipam	phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.	CWE-79 Cross-site Scripting	CVE-2020-13225	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210049	7.5	HIGH Network	wireshark debian opensuse fedoraproject	wireshark debian_linux leap fedora	In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a c…	CWE-674 Uncontrolled Recursion	CVE-2020-13164	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

210050	7.4	HIGH Network	em-imap_project	em-imap	em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is no…	CWE-295 Improper Certificate Validation	CVE-2020-13163	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed