Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 14, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251081 | 10 | 危険 | リアルネットワークス | - | RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4244 | 2011-11-28 10:13 | 2011-11-18 | Show | GitHub Exploit DB Packet Storm |
| 251082 | 4.3 | 警告 | Beanbag | - | Review Board の commenting system におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4312 | 2011-11-25 16:03 | 2011-11-15 | Show | GitHub Exploit DB Packet Storm |
| 251083 | 3.2 | 注意 | ヒューレット・パッカード | - | HP Operations Agent および Performance Agent におけるディレクトリアクセス制限を回避される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-4160 | 2011-11-25 16:02 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251084 | 7.5 | 危険 | Technicolor | - | Thomson TG585 上の UPnP IGD の実装における任意のポートマッピングを確立される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4506 | 2011-11-25 14:33 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251085 | 7.5 | 危険 | 日本アルカテル・ルーセント | - | SpeedTouch 5x6 上の UPnP IGD の実装における任意のポートマッピングを確立される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4505 | 2011-11-25 14:32 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251086 | 7.5 | 危険 | ZyXEL Genmei Mori |
- | ZyXEL P-330W におけるポートマッピングによる通信を確立される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4504 | 2011-11-25 14:31 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251087 | 7.5 | 危険 | Sitecom Broadcom |
- | Sitecom WL-111 上で動作する Broadcom Linux の UPnP IGD 実装におけるポートマッピングを確立される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4503 | 2011-11-25 14:31 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251088 | 7.5 | 危険 | Sitecom Canyon EDIMAX Technology Sweex |
- | 複数のルータ上で動作する Edimax EdiLinux の UPnP IGD 実装における任意のコマンドを実行される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4502 | 2011-11-25 14:30 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251089 | 7.5 | 危険 | Sitecom Canyon EDIMAX Technology Sweex |
- | 複数のルータ上で動作する Edimax EdiLinux の UPnP IGD 実装におけるポートマッピングを確立される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4501 | 2011-11-25 14:29 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
| 251090 | 7.5 | 危険 | シスコシステムズ (Linksys) シスコシステムズ |
- | Cisco Linksys WRT54GX の UPnP IGD 実装におけるファイアウォールを管理される脆弱性 |
CWE-16
環境設定 |
CVE-2011-4500 | 2011-11-25 14:28 | 2011-11-22 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 14, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201081 | 5.3 |
MEDIUM
Network |
mantisbt | source_integration | An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private … |
NVD-CWE-noinfo
|
CVE-2020-36192 | 2024-11-21 14:28 | 2021-01-19 | Show | GitHub Exploit DB Packet Storm |
| 201082 | 4.5 |
MEDIUM
Network |
jupyter | jupyterhub | JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account). |
CWE-352
Origin Validation Error |
CVE-2020-36191 | 2024-11-21 14:28 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 201083 | 6.1 |
MEDIUM
Network |
rails_admin_project | rails_admin | RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms. |
CWE-79
Cross-site Scripting |
CVE-2020-36190 | 2024-11-21 14:28 | 2021-01-13 | Show | GitHub Exploit DB Packet Storm |
| 201084 | 7.5 |
HIGH
Network |
socket | socket.io-parser | socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2020-36049 | 2024-11-21 14:28 | 2021-01-8 | Show | GitHub Exploit DB Packet Storm |
| 201085 | 7.5 |
HIGH
Network |
socket | engine.io | Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport. |
CWE-400
Uncontrolled Resource Consumption |
CVE-2020-36048 | 2024-11-21 14:28 | 2021-01-8 | Show | GitHub Exploit DB Packet Storm |
| 201086 | 8.1 |
HIGH
Network |
fasterxml netapp debian oracle |
jackson-databind cloud_backup service_level_manager debian_linux webcenter_portal primavera_unifier application_testing_suite agile_plm communications_policy_management com… |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-36183 | 2024-11-21 14:28 | 2021-01-7 | Show | GitHub Exploit DB Packet Storm |
| 201087 | 8.1 |
HIGH
Network |
fasterxml netapp debian oracle |
jackson-databind cloud_backup service_level_manager debian_linux webcenter_portal primavera_unifier application_testing_suite agile_plm communications_policy_management com… |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-36182 | 2024-11-21 14:28 | 2021-01-7 | Show | GitHub Exploit DB Packet Storm |
| 201088 | 8.1 |
HIGH
Network |
netapp debian oracle fasterxml |
cloud_backup service_level_manager debian_linux webcenter_portal primavera_unifier application_testing_suite agile_plm communications_policy_management communications_billing_… |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-36180 | 2024-11-21 14:28 | 2021-01-7 | Show | GitHub Exploit DB Packet Storm |
| 201089 | 8.1 |
HIGH
Network |
netapp debian oracle fasterxml |
cloud_backup service_level_manager debian_linux webcenter_portal application_testing_suite primavera_unifier agile_plm communications_policy_management communications_billing_… |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-36179 | 2024-11-21 14:28 | 2021-01-7 | Show | GitHub Exploit DB Packet Storm |
| 201090 | 8.1 |
HIGH
Network |
fasterxml netapp debian oracle |
jackson-databind cloud_backup service_level_manager debian_linux webcenter_portal application_testing_suite banking_platform primavera_unifier agile_plm communications_bill… |
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSo… |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-36189 | 2024-11-21 14:28 | 2021-01-7 | Show | GitHub Exploit DB Packet Storm |