Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252351 10 危険 Google - Google Chrome の GPU プロセスにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2011-1301 2011-06-3 10:21 2011-04-14 Show GitHub Exploit DB Packet Storm
252352 10 危険 Google
Mozilla Foundation
- Windows 上で稼働する Mozilla Firefox、および Google Chrome における任意のコードを実行される脆弱性 CWE-189
数値処理の問題
CVE-2011-1300 2011-06-3 09:55 2011-04-7 Show GitHub Exploit DB Packet Storm
252353 5 警告 Google - WebKit の counterToCSSValue 関数におけるサービス運用妨害(DoS) の脆弱性 CWE-Other
その他
CVE-2011-1691 2011-06-3 09:53 2011-03-28 Show GitHub Exploit DB Packet Storm
252354 4.3 警告 サイバートラスト株式会社
Rdesktop
レッドハット
- rdesktop の disk_create 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1595 2011-06-3 09:50 2010-05-8 Show GitHub Exploit DB Packet Storm
252355 4.3 警告 GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット
- GNU Mailman の Cgi/confirm.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0707 2011-06-3 08:58 2011-02-22 Show GitHub Exploit DB Packet Storm
252356 3.5 注意 アップル
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット
- GNU Mailman におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3089 2011-06-3 08:56 2011-03-1 Show GitHub Exploit DB Packet Storm
252357 4.3 警告 アップル
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット
- Mailman における複数のクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0564 2011-06-3 08:55 2008-02-5 Show GitHub Exploit DB Packet Storm
252358 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性 CWE-119
バッファエラー
CVE-2011-1567 2011-06-2 09:51 2011-04-5 Show GitHub Exploit DB Packet Storm
252359 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1566 2011-06-2 09:50 2011-04-5 Show GitHub Exploit DB Packet Storm
252360 10 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-1565 2011-06-2 09:48 2011-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209531 6.5 MEDIUM
Network
gogs gogs In Gogs 0.11.91, MakeEmailPrimary in models/user_mail.go lacks a "not the owner of the email" check. CWE-281
 Improper Preservation of Permissions
CVE-2020-14958 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209532 5.9 MEDIUM
Network
mutt
debian
neomutt
fedoraproject
canonical
opensuse
mutt
debian_linux
neomutt
fedora
ubuntu_linux
leap
Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data (e.g.,… CWE-74
Injection
CVE-2020-14954 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209533 8.8 HIGH
Network
aapanel aapanel aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in a modified /system?action=ServiceAdmin request (start, stop, or restart) to the setti… CWE-78
OS Command 
CVE-2020-14950 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209534 9.8 CRITICAL
Network
tendenci tendenci Tendenci 12.0.10 allows unrestricted deserialization in apps\helpdesk\views\staff.py. CWE-502
 Deserialization of Untrusted Data
CVE-2020-14942 2024-11-21 14:04 2020-06-22 Show GitHub Exploit DB Packet Storm
209535 8.8 HIGH
Network
squirrelmail squirrelmail compose.php in SquirrelMail 1.4.22 calls unserialize for the $attachments value, which originates from an HTTP POST request. NOTE: the vendor disputes this because these two conditions for PHP object… CWE-502
 Deserialization of Untrusted Data
CVE-2020-14933 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
209536 9.8 CRITICAL
Network
squirrelmail squirrelmail compose.php in SquirrelMail 1.4.22 calls unserialize for the $mailtodata value, which originates from an HTTP GET request. This is related to mailto.php. CWE-502
 Deserialization of Untrusted Data
CVE-2020-14932 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
209537 9.8 CRITICAL
Network
dmitry_project dmitry A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_… CWE-787
 Out-of-bounds Write
CVE-2020-14931 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
209538 8.1 HIGH
Network
bt_ctroms_terminal_project bt_ctroms_terminal An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp req… CWE-319
CWE-522
Cleartext Transmission of Sensitive Information
 Insufficiently Protected Credentials
CVE-2020-14930 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
209539 7.5 HIGH
Network
alpine_project
fedoraproject
debian
alpine
fedora
debian_linux
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the… NVD-CWE-Other
CVE-2020-14929 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm
209540 4.8 MEDIUM
Network
naviwebs navigate_cms Navigate CMS 2.9 allows XSS via the Alias or Real URL field of the "Web Sites > Create > Aliases > Add" screen. CWE-79
Cross-site Scripting
CVE-2020-14927 2024-11-21 14:04 2020-06-20 Show GitHub Exploit DB Packet Storm