Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251691 9.3 危険 アドビシステムズ - Adobe Shockwave Player の dirapi.dll モジュールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2587 2011-03-10 15:59 2011-02-8 Show GitHub Exploit DB Packet Storm
251692 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0606 2011-03-10 15:55 2011-02-8 Show GitHub Exploit DB Packet Storm
251693 6.8 警告 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0605 2011-03-10 15:52 2011-02-8 Show GitHub Exploit DB Packet Storm
251694 4.3 警告 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0604 2011-03-10 15:50 2011-02-8 Show GitHub Exploit DB Packet Storm
251695 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0603 2011-03-10 15:48 2011-02-8 Show GitHub Exploit DB Packet Storm
251696 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0602 2011-03-10 15:46 2011-02-8 Show GitHub Exploit DB Packet Storm
251697 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の U3D コンポーネントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0600 2011-03-10 15:44 2011-02-8 Show GitHub Exploit DB Packet Storm
251698 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0599 2011-03-9 16:17 2011-02-8 Show GitHub Exploit DB Packet Storm
251699 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat の ACE.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0598 2011-03-9 15:53 2011-02-8 Show GitHub Exploit DB Packet Storm
251700 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0596 2011-03-9 15:51 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200121 6.1 MEDIUM
Network 		secomea gatemanager_firmware Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager … CWE-79
Cross-site Scripting 		CVE-2020-29029 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200122 6.1 MEDIUM
Network 		secomea gatemanager_firmware Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4. CWE-79
Cross-site Scripting 		CVE-2020-29028 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200123 7.2 HIGH
Network 		secomea sitemanager_firmware Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea… CWE-863
 Incorrect Authorization 		CVE-2020-29020 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200124 7.2 HIGH
Network 		secomea gatemanager_8250_firmware Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateMana… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-29032 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200125 8.6 HIGH
Network 		totvs fluig The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 and Fluig 1.6.4 CWE-22
Path Traversal 		CVE-2020-29134 2024-11-21 14:23 2021-03-6 Show GitHub Exploit DB Packet Storm
200126 9.8 CRITICAL
Network 		cgal
fedoraproject
debian 		computational_geometry_algorithms_library
fedora
debian_linux 		A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sloop() slh->… - CVE-2020-28636 2024-11-21 14:23 2021-03-5 Show GitHub Exploit DB Packet Storm
200127 9.8 CRITICAL
Network 		thimpress wp_hotel_booking The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in inclu… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-29047 2024-11-21 14:23 2021-03-4 Show GitHub Exploit DB Packet Storm
200128 9.8 CRITICAL
Network 		bittacora bpanel In bPanel 2.0, the administrative ajax endpoints (aka ajax/aj_*.php) are accessible without authentication and allow SQL injections, which could lead to platform compromise. CWE-89
SQL Injection 		CVE-2020-28657 2024-11-21 14:23 2021-03-3 Show GitHub Exploit DB Packet Storm
200129 5.9 MEDIUM
Network 		saltstack
fedoraproject
debian 		salt
fedora
debian_linux 		In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers (in the vmware.py files) does not always validate the SSL/TLS certificate. CWE-295
Improper Certificate Validation  		CVE-2020-28972 2024-11-21 14:23 2021-02-27 Show GitHub Exploit DB Packet Storm
200130 7.8 HIGH
Local 		owncloud owncloud_desktop_client ownCloud owncloud/client before 2.7 allows DLL Injection. The desktop client loaded development plugins from certain directories when they were present. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-28646 2024-11-21 14:23 2021-02-27 Show GitHub Exploit DB Packet Storm