Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251231	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1605	2011-12-1 10:36	2011-04-27	Show	GitHub Exploit DB Packet Storm

251232	7.1	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2011-1604	2011-12-1 10:35	2011-04-27	Show	GitHub Exploit DB Packet Storm

251233	4.3	警告	John Godley	-	WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4562	2011-11-30 16:50	2011-11-28	Show	GitHub Exploit DB Packet Storm

251234	4.3	警告	codefuture	-	CF Image Hosting Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4572	2011-11-30 16:38	2011-11-29	Show	GitHub Exploit DB Packet Storm

251235	7.5	危険	EA Improved	-	Estate Agent コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4571	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

251236	7.5	危険	Takeaweb	-	Time Returns コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4570	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

251237	7.5	危険	tommykent1210	-	MyBB Forum 用 Userbar プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4569	2011-11-30 16:36	2011-11-29	Show	GitHub Exploit DB Packet Storm

251238	4.3	警告	WordPress.org	-	WordPress 用 Flowplayer プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4568	2011-11-30 16:35	2011-11-29	Show	GitHub Exploit DB Packet Storm

251239	4.3	警告	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4567	2011-11-30 16:34	2011-11-29	Show	GitHub Exploit DB Packet Storm

251240	4.3	警告	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4547	2011-11-30 16:34	2011-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196041	7.8	HIGH Local	intel	bios	Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of…	CWE-125 Out-of-bounds Read	CVE-2020-8672	2024-11-21 14:39	2021-02-3	Show	GitHub Exploit DB Packet Storm

196042	6.7	MEDIUM Local	intel	m10jnp2sb_firmware	Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-20 Improper Input Validation	CVE-2020-8734	2024-11-21 14:39	2021-02-3	Show	GitHub Exploit DB Packet Storm

196043	5.5	MEDIUM Local	netapp	oncommand_unified_manager	OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).	CWE-59 Link Following	CVE-2020-8585	2024-11-21 14:39	2021-01-29	Show	GitHub Exploit DB Packet Storm

196044	9.1	CRITICAL Network	kubernetes	java	Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a malic…	CWE-22 Path Traversal	CVE-2020-8570	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

196045	6.5	MEDIUM Network	kubernetes	container_storage_interface_snapshotter	Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim a…	CWE-476 NULL Pointer Dereference	CVE-2020-8569	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

196046	6.5	MEDIUM Network	kubernetes	secrets_store_csi_driver	Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem an…	CWE-22 Path Traversal	CVE-2020-8568	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

196047	6.5	MEDIUM Network	google hashicorp microsoft	secret_manager_provider_for_secret_store_csi_driver vault_provider_for_secrets_store_csi_driver azure_key_vault_provider_for_secrets_store_csi_driver	Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass …	CWE-22 Path Traversal	CVE-2020-8567	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

196048	5.0	MEDIUM Network	kubernetes oracle	kubernetes communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_service_communication_proxy communications_cloud_native_core_policy	Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke…	NVD-CWE-noinfo	CVE-2020-8554	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

196049	6.5	MEDIUM Network	netapp	clustered_data_ontap	Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage …	NVD-CWE-noinfo	CVE-2020-8581	2024-11-21 14:39	2021-01-20	Show	GitHub Exploit DB Packet Storm

196050	9.8	CRITICAL Network	netapp	solidfire hci_management_node hci_storage_node element_os	Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.	NVD-CWE-noinfo	CVE-2020-8584	2024-11-21 14:39	2021-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed