Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251981 7.5 危険 Vtiger - vTiger CRM の Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4559 2011-11-30 16:22 2011-11-28 Show GitHub Exploit DB Packet Storm
251982 4.3 警告 Contao - Contao におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4335 2011-11-29 16:28 2011-11-28 Show GitHub Exploit DB Packet Storm
251983 4.3 警告 Dolibarr ERP & CRM - Dolibarr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4329 2011-11-29 16:27 2011-11-8 Show GitHub Exploit DB Packet Storm
251984 4.3 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4319 2011-11-29 16:26 2011-11-28 Show GitHub Exploit DB Packet Storm
251985 4.3 警告 Combodo - Combodo iTop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4275 2011-11-29 16:23 2011-11-26 Show GitHub Exploit DB Packet Storm
251986 9.3 危険 SunPlus Electronics - DVR Remote ActiveX コントロールの DVRemoteAx.ax における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3828 2011-11-29 16:22 2011-11-26 Show GitHub Exploit DB Packet Storm
251987 6.8 警告 IBM - IBM TS3100 および TS3200 テープ・ライブラリにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-1372 2011-11-29 16:15 2011-11-23 Show GitHub Exploit DB Packet Storm
251988 1.9 注意 ヒューレット・パッカード
IBM
- IBM WebSphere MQ における listener プロセス強制終了の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1378 2011-11-29 16:14 2011-11-26 Show GitHub Exploit DB Packet Storm
251989 5 警告 シスコシステムズ - Cisco Secure Access Control System における任意のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-0951 2011-11-29 10:38 2011-03-30 Show GitHub Exploit DB Packet Storm
251990 5 警告 シスコシステムズ - Cisco Network Access Control Guest Server におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0963 2011-11-29 10:37 2011-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215101 7.8 HIGH
Local
google android In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution… NVD-CWE-noinfo
CVE-2020-0096 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215102 7.8 HIGH
Local
google android In setImageHeight and setImageWidth of ExifUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional exe… CWE-787
 Out-of-bounds Write
CVE-2020-0094 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215103 5.0 MEDIUM
Local
google
debian
canonical
libexif_project
opensuse
android
debian_linux
ubuntu_linux
libexif
leap
In exif_data_save_data_entry of exif-data.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privile… CWE-125
Out-of-bounds Read
CVE-2020-0093 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215104 5.0 MEDIUM
Local
google android In setHideSensitive of NotificationStackScrollLayout.java, there is a possible disclosure of sensitive notification content due to a permissions bypass. This could lead to local information disclosur… CWE-200
Information Exposure
CVE-2020-0092 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215105 5.5 MEDIUM
Local
google android In mnld, an incorrect configuration in driver_cfg of mnld for meta factory mode.Product: AndroidVersions: Android SoCAndroid ID: A-149808700 NVD-CWE-noinfo
CVE-2020-0091 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215106 5.5 MEDIUM
Local
google android An improper authorization in the receiver component of Email.Product: AndroidVersions: Android SoCAndroid ID: A-149813048 NVD-CWE-noinfo
CVE-2020-0090 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215107 5.5 MEDIUM
Local
google android An improper authorization in the receiver component of the Android Suite Daemon.Product: AndroidVersions: Android SoCAndroid ID: A-149813448 NVD-CWE-noinfo
CVE-2020-0065 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215108 5.5 MEDIUM
Local
google android An improper authorization while processing the provisioning data.Product: AndroidVersions: Android SoCAndroid ID: A-149866855 NVD-CWE-noinfo
CVE-2020-0064 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215109 7.8 HIGH
Local
google android In onCreate of SettingsBaseActivity.java, there is a possible unauthorized setting modification due to a permissions bypass. This could lead to local escalation of privilege with no additional execut… CWE-276
Incorrect Default Permissions 
CVE-2020-0024 2024-11-21 13:52 2020-05-15 Show GitHub Exploit DB Packet Storm
215110 8.1 HIGH
Network
dahuasecurity sd6al_firmware
sd5a_firmware
sd1a_firmware
ptz1a_firmware
sd50_firmware
sd52c_firmware
ipc-hx5842h_firmware
ipc-hx7842h_firmware
ipc-hx2xxx_firmware
ipc-hxxx5x4x_firmware
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak securi… CWE-276
Incorrect Default Permissions 
CVE-2019-9682 2024-11-21 13:52 2020-05-14 Show GitHub Exploit DB Packet Storm