Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251841 4.3 警告 アップル - Windows 上で稼動する Apple Safari の CFNetwork におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1420 2011-08-5 10:07 2011-07-21 Show GitHub Exploit DB Packet Storm
251842 9.3 危険 アップル - Windows 上で稼動する Apple Safari の CFNetwork における任意のコードを実行される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-1383 2011-08-5 10:04 2011-07-21 Show GitHub Exploit DB Packet Storm
251843 4.3 警告 ヒューレット・パッカード - ArcSight Connector Appliance にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0770 2011-08-5 10:02 2011-07-19 Show GitHub Exploit DB Packet Storm
251844 5.8 警告 Mutt
レッドハット
- Mutt における SSL SMTP サーバになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2011-1429 2011-08-5 09:59 2011-03-16 Show GitHub Exploit DB Packet Storm
251845 7.5 危険 Plone Foundation
Zope Foundation
- Plone などの製品で使用される Zope および PloneHotfix20110720 における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-2528 2011-08-5 09:57 2011-06-28 Show GitHub Exploit DB Packet Storm
251846 5 警告 ISC, Inc.
レッドハット
オラクル
- ISC BIND にサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-2464 2011-08-5 09:55 2011-07-6 Show GitHub Exploit DB Packet Storm
251847 5 警告 サイバートラスト株式会社
Apache Software Foundation
レッドハット
- Apache Subversion で利用される Apache HTTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-1752 2011-08-5 09:52 2011-06-6 Show GitHub Exploit DB Packet Storm
251848 6 警告 IBM
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
OpenBSD
- OpenSSH における X11-forwarded コネクション処理の不備によるセッションハイジャックの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-1483 2011-08-5 09:50 2008-03-24 Show GitHub Exploit DB Packet Storm
251849 7.5 危険 オラクル - Oracle SysFW の Sun Integrated Lights Out Manager における脆弱性 CWE-noinfo
情報不足
CVE-2011-2307 2011-08-4 10:10 2011-07-19 Show GitHub Exploit DB Packet Storm
251850 7.5 危険 オラクル - Oracle SPARC Enterprise M Series における XSCF Control Package (XCP) の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2011-2299 2011-08-4 10:08 2011-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209531 7.5 HIGH
Network
apache
debian
shiro
debian_linux
Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass. NVD-CWE-noinfo
CVE-2020-13933 2024-11-21 14:02 2020-08-18 Show GitHub Exploit DB Packet Storm
209532 8.8 HIGH
Network
apache solr Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-co… CWE-20
 Improper Input Validation 
CVE-2020-13941 2024-11-21 14:02 2020-08-17 Show GitHub Exploit DB Packet Storm
209533 4.3 MEDIUM
Network
redhat quay An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot… NVD-CWE-noinfo
CVE-2020-14313 2024-11-21 14:02 2020-08-11 Show GitHub Exploit DB Packet Storm
209534 7.1 HIGH
Network
redhat cloudforms_management_engine Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal netw… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-14296 2024-11-21 14:02 2020-08-11 Show GitHub Exploit DB Packet Storm
209535 9.8 CRITICAL
Network
apache skywalking **Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases. CWE-89
SQL Injection
CVE-2020-13921 2024-11-21 14:02 2020-08-5 Show GitHub Exploit DB Packet Storm
209536 6.0 MEDIUM
Local
gnu
redhat
opensuse
canonical
grub2
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
leap
ubuntu_linux
There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow lead… - CVE-2020-14311 2024-11-21 14:02 2020-08-1 Show GitHub Exploit DB Packet Storm
209537 6.0 MEDIUM
Local
gnu
redhat
opensuse
canonical
grub2
enterprise_linux
enterprise_linux_eus
enterprise_linux_server_tus
enterprise_linux_server_aus
leap
ubuntu_linux
There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with bu… CWE-190
 Integer Overflow or Wraparound
CVE-2020-14310 2024-11-21 14:02 2020-08-1 Show GitHub Exploit DB Packet Storm
209538 7.8 HIGH
Local
pi-hole pi-hole An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root … CWE-78
CWE-269
OS Command 
 Improper Privilege Management
CVE-2020-14162 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
209539 9.1 CRITICAL
Network
abus secvest_hybrid_fumo50110_firmware The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to c… CWE-287
Improper Authentication
CVE-2020-14158 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm
209540 6.7 MEDIUM
Local
gnu
opensuse
grub2
leap
There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic ov… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound
CVE-2020-14309 2024-11-21 14:02 2020-07-30 Show GitHub Exploit DB Packet Storm