Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 9, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251201	5	警告	CAREL INDUSTRIES S.p.a.	-	Carel PlantVisor の CarelDataServer.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3487	2011-09-28 14:13	2011-09-16	Show	GitHub Exploit DB Packet Storm

251202	10	危険	MetaStock	-	Equis MetaStock における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-3488	2011-09-28 14:10	2011-09-16	Show	GitHub Exploit DB Packet Storm

251203	5	警告	Rockwell Automation	-	Rockwell RSLogix の RnaUtility.dll におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-119 バッファエラー	CVE-2011-3489	2011-09-28 13:53	2011-09-16	Show	GitHub Exploit DB Packet Storm

251204	10	危険	AzeoTech, Inc.	-	Azeotech DAQFactory におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3492	2011-09-28 13:49	2011-09-16	Show	GitHub Exploit DB Packet Storm

251205	10	危険	ヒューレット・パッカード	-	HP Business Service Automation Essentials における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2412	2011-09-27 11:28	2011-09-19	Show	GitHub Exploit DB Packet Storm

251206	3.5	注意	シスコシステムズ	-	Cisco TelePresence System MXP の Web インターフェイスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2544	2011-09-27 11:24	2011-09-23	Show	GitHub Exploit DB Packet Storm

251207	4.3	警告	MantisBT Group	-	MantisBT の bug_actiongroup_ext_page.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3578	2011-09-27 11:19	2011-08-31	Show	GitHub Exploit DB Packet Storm

251208	4.3	警告	MantisBT Group	-	MantisBT におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3358	2011-09-27 11:18	2011-09-21	Show	GitHub Exploit DB Packet Storm

251209	6.8	警告	MantisBT Group	-	MantisBT の bug_actiongroup_ext_page.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3357	2011-09-27 11:17	2011-08-31	Show	GitHub Exploit DB Packet Storm

251210	4.3	警告	MantisBT Group	-	MantisBT の filter_api.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2938	2011-09-27 11:15	2011-08-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196771	6.5	MEDIUM Network	bosch	video_management_system_viewer video_management_system	A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bo…	CWE-22 Path Traversal	CVE-2020-6767	2024-11-21 14:36	2020-02-7	Show	GitHub Exploit DB Packet Storm

196772	5.4	MEDIUM Network	sos-berlin	jobscheduler	A cross-site scripting (XSS) vulnerability in the JOC Cockpit component of SOS JobScheduler 1.11 and 1.13.2 allows attackers to inject arbitrary web script or HTML via JSON properties available from …	CWE-79 Cross-site Scripting	CVE-2020-6854	2024-11-21 14:36	2020-02-6	Show	GitHub Exploit DB Packet Storm

196773	7.5	HIGH Network	gitlab	gitlab	An issue was discovered in GitLab EE 11.3 and later. A GitLab Workhorse bypass could lead to package and file disclosure via request smuggling.	NVD-CWE-noinfo	CVE-2020-6833	2024-11-21 14:36	2020-02-6	Show	GitHub Exploit DB Packet Storm

196774	9.8	CRITICAL Network	dotcms	dotcms	dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute files under $TOMCAT_HOME/webapps/ROOT/assets (which should be a…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2020-6754	2024-11-21 14:36	2020-02-6	Show	GitHub Exploit DB Packet Storm

196775	9.8	CRITICAL Network	automationdirect	c-more_ea9-rhi_firmware c-more_ea9-t6cl-r_firmware c-more_ea9-t6cl_firmware c-more_ea9-t7cl-r_firmware c-more_ea9-t7cl_firmware c-more_ea9-t8cl_firmware c-more_ea9-t10cl_firmware	It is possible to unmask credentials and other sensitive information on “unprotected” project files, which may allow an attacker to remotely access the C-More Touch Panels EA9 series: firmware versio…	CWE-522 Insufficiently Protected Credentials	CVE-2020-6969	2024-11-21 14:36	2020-02-6	Show	GitHub Exploit DB Packet Storm

196776	7.5	HIGH Network	opensuse	wicked leap	An ni_dhcp4_parse_response memory leak in openSUSE wicked 0.6.55 and earlier allows network attackers to cause a denial of service by sending DHCP4 packets without a message type option.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-7216	2024-11-21 14:36	2020-02-6	Show	GitHub Exploit DB Packet Storm

196777	7.8	HIGH Local	mariadb	mariadb	mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack …	CWE-59 Link Following	CVE-2020-7221	2024-11-21 14:36	2020-02-5	Show	GitHub Exploit DB Packet Storm

196778	7.5	HIGH Network	hashicorp	consul	HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-7219	2024-11-21 14:36	2020-01-31	Show	GitHub Exploit DB Packet Storm

196779	7.5	HIGH Network	hashicorp	nomad	HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-7218	2024-11-21 14:36	2020-01-31	Show	GitHub Exploit DB Packet Storm

196780	9.8	CRITICAL Network	openbsd debian fedoraproject canonical	opensmtpd debian_linux fedora ubuntu_linux	smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated …	CWE-78 CWE-755 OS Command Improper Handling of Exceptional Conditions	CVE-2020-7247	2024-11-21 14:36	2020-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed