Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251151 9.3 危険 Parallels - Parallels Plesk Panel の Control Panel における詳細不明な脆弱性 CWE-DesignError
CVE-2011-4854 2011-12-20 14:40 2011-12-16 Show GitHub Exploit DB Packet Storm
251152 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4853 2011-12-20 14:38 2011-12-16 Show GitHub Exploit DB Packet Storm
251153 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4852 2011-12-20 14:38 2011-12-16 Show GitHub Exploit DB Packet Storm
251154 9.3 危険 Parallels - Parallels Plesk Panel の Control Panel における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-4851 2011-12-20 14:13 2011-12-16 Show GitHub Exploit DB Packet Storm
251155 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4850 2011-12-20 14:12 2011-12-16 Show GitHub Exploit DB Packet Storm
251156 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における Cookie をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2011-4849 2011-12-20 14:11 2011-12-16 Show GitHub Exploit DB Packet Storm
251157 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4848 2011-12-20 14:10 2011-12-16 Show GitHub Exploit DB Packet Storm
251158 7.5 危険 Parallels - Parallels Plesk Panel の Control Panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4847 2011-12-20 12:23 2011-12-16 Show GitHub Exploit DB Packet Storm
251159 4.3 警告 Parallels - Parallels Plesk Panel の Site Editor 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4777 2011-12-20 12:23 2011-12-16 Show GitHub Exploit DB Packet Storm
251160 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4776 2011-12-20 12:22 2011-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209531 6.8 MEDIUM
Adjacent 		openenclave openenclave In Open Enclave before version 0.12.0, an information disclosure vulnerability exists when an enclave application using the syscalls provided by the sockets.edl is loaded by a malicious host applicat… NVD-CWE-Other
CVE-2020-15224 2024-11-21 14:05 2020-10-15 Show GitHub Exploit DB Packet Storm
209532 6.5 MEDIUM
Network 		mirahezebots channelmgnt In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled… CWE-862
 Missing Authorization 		CVE-2020-15251 2024-11-21 14:05 2020-10-14 Show GitHub Exploit DB Packet Storm
209533 5.5 MEDIUM
Local 		junit
debian
apache
oracle 		junit4
debian_linux
pluto
communications_cloud_native_core_policy 		In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared bet… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15250 2024-11-21 14:05 2020-10-13 Show GitHub Exploit DB Packet Storm
209534 9.8 CRITICAL
Network 		smartstore smartstore Affected versions of Smartstore have a missing WebApi Authentication attribute. This vulnerability affects Smartstore shops in version 4.0.0 & 4.0.1 which have installed and activated the Web API plu… CWE-306
Missing Authentication for Critical Function 		CVE-2020-15243 2024-11-21 14:05 2020-10-9 Show GitHub Exploit DB Packet Storm
209535 6.1 MEDIUM
Network 		typo3 fluid_engine
typo3 		TYPO3 Fluid Engine (package `typo3fluid/fluid`) before versions 2.0.5, 2.1.4, 2.2.1, 2.3.5, 2.4.1, 2.5.5 or 2.6.1 is vulnerable to cross-site scripting when making use of the ternary conditional oper… CWE-79
Cross-site Scripting 		CVE-2020-15241 2024-11-21 14:05 2020-10-9 Show GitHub Exploit DB Packet Storm
209536 6.1 MEDIUM
Network 		vercel next.js Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. … - CVE-2020-15242 2024-11-21 14:05 2020-10-9 Show GitHub Exploit DB Packet Storm
209537 5.9 MEDIUM
Network 		mozilla thunderbird If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunde… NVD-CWE-noinfo
CVE-2020-15646 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209538 6.5 MEDIUM
Network 		smarter smarter_coffee_maker_1st_generation Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button. NOTE: This vulnerability only affects p… NVD-CWE-noinfo
CVE-2020-15501 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209539 5.3 MEDIUM
Network 		glpi-project glpi In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to … - CVE-2020-15217 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209540 8.6 HIGH
Network 		glpi-project glpi In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulne… - CVE-2020-15176 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm