Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252341 5 警告 Koha - Koha および LibLime Koha におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4715 2011-12-13 15:05 2011-11-25 Show GitHub Exploit DB Packet Storm
252342 5 警告 Virtual Vertex - Virtual Vertex Muster におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4714 2011-12-13 15:02 2011-12-8 Show GitHub Exploit DB Packet Storm
252343 5 警告 osCSS - osCSS の catalog/content.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4713 2011-12-13 15:01 2011-11-8 Show GitHub Exploit DB Packet Storm
252344 5 警告 monoxide0184 - Oxide WebServer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4712 2011-12-13 14:59 2011-12-8 Show GitHub Exploit DB Packet Storm
252345 5 警告 Namazu Project - Namazu の namazu.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4711 2011-12-13 14:57 2011-12-8 Show GitHub Exploit DB Packet Storm
252346 7.5 危険 Lucid Crew - Pixie CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4710 2011-12-13 14:53 2011-12-8 Show GitHub Exploit DB Packet Storm
252347 4.3 警告 Hotaru CMS - Hotaru CMS の Search プラグイン内にある Hotaru.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4709 2011-12-13 14:52 2011-12-8 Show GitHub Exploit DB Packet Storm
252348 4.3 警告 IBM - IBM Rational Asset Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4708 2011-12-13 14:51 2011-05-5 Show GitHub Exploit DB Packet Storm
252349 4.3 警告 SAP - SAP Netweaver の Virus Scan Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4707 2011-12-13 14:50 2011-12-8 Show GitHub Exploit DB Packet Storm
252350 5 警告 Igor Sysoev - nginx におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4315 2011-12-13 14:49 2011-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208911 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile Service Elevation of Privilege Vulnerability'. NVD-CWE-noinfo
CVE-2020-1360 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208912 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly handles memory, aka 'Windows CNG Key Isolation Service Elevation of… NVD-CWE-noinfo
CVE-2020-1359 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208913 5.5 MEDIUM
Local
microsoft windows_10
windows_server_2016
windows_server_2019
An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on th… NVD-CWE-noinfo
CVE-2020-1358 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208914 7.8 HIGH
Local
microsoft windows_10
windows_server_2016
windows_server_2019
An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows System Events Broker Elevation of Privilege Vulnerability'. NVD-CWE-noinfo
CVE-2020-1357 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208915 7.8 HIGH
Local
microsoft windows_server_2012
windows_server_2016
windows_server_2019
An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows iSCSI Target Service Elevation of Privilege Vulnerability'. NVD-CWE-noinfo
CVE-2020-1356 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208916 7.8 HIGH
Local
microsoft windows_server_2016
windows_10
A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully exploited the vulnerability would gain execution on a victim syst… CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write
CVE-2020-1355 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208917 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim … NVD-CWE-noinfo
CVE-2020-1354 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208918 7.8 HIGH
Local
microsoft windows_10
windows_server_2016
windows_server_2019
An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV… NVD-CWE-noinfo
CVE-2020-1353 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208919 7.8 HIGH
Local
microsoft windows_10
windows_server_2016
windows_server_2019
An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim s… NVD-CWE-noinfo
CVE-2020-1352 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm
208920 5.5 MEDIUM
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Graphics Component Information Disclosure Vulnerability'. NVD-CWE-noinfo
CVE-2020-1351 2024-11-21 14:10 2020-07-15 Show GitHub Exploit DB Packet Storm