Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252421 9.3 危険 マイクロソフト - MDAC および WDAC の SQLConnectW 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0026 2011-01-28 15:50 2011-01-11 Show GitHub Exploit DB Packet Storm
252422 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット		 - Wireshark の sect_enttec_dmx_da 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4538 2011-01-28 15:46 2011-01-7 Show GitHub Exploit DB Packet Storm
252423 5.8 警告 Mozilla Foundation
オラクル		 - Mozilla Firefox の js_InitRandom 関数におけるシードの値を推測される脆弱性 CWE-310
暗号の問題 		CVE-2010-3399 2011-01-28 15:41 2010-09-15 Show GitHub Exploit DB Packet Storm
252424 10 危険 Google - Google Chrome の WebSockets の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-3254 2011-01-27 15:05 2010-09-2 Show GitHub Exploit DB Packet Storm
252425 10 危険 Google - Google Chrome の notification permissions の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3253 2011-01-27 15:04 2010-09-2 Show GitHub Exploit DB Packet Storm
252426 10 危険 Google - Google Chrome の Notifications presenter におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3252 2011-01-27 15:02 2010-09-2 Show GitHub Exploit DB Packet Storm
252427 4.3 警告 Google - Google Chrome の WebSockets 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3251 2011-01-27 15:01 2010-09-2 Show GitHub Exploit DB Packet Storm
252428 5 警告 Google - Google Chrome におけるインストールされた拡張機能の設定を列挙される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3250 2011-01-27 15:00 2010-09-2 Show GitHub Exploit DB Packet Storm
252429 9.3 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3249 2011-01-27 14:58 2010-09-2 Show GitHub Exploit DB Packet Storm
252430 5 警告 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3248 2011-01-27 14:56 2010-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210041 6.1 MEDIUM
Network 		open_upload_project open_upload Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field. CWE-79
Cross-site Scripting 		CVE-2020-11712 2024-11-21 13:58 2020-04-13 Show GitHub Exploit DB Packet Storm
210042 7.5 HIGH
Network 		cpp-httplib_project cpp-httplib cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some … CWE-74
Injection 		CVE-2020-11709 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210043 9.8 CRITICAL
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE() feature, which is for execu… CWE-269
 Improper Privilege Management 		CVE-2020-11708 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210044 8.8 HIGH
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user (non-admin) can craft a Jun… CWE-863
 Incorrect Authorization 		CVE-2020-11707 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210045 8.8 HIGH
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users;… CWE-352
 Origin Validation Error 		CVE-2020-11706 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210046 9.8 CRITICAL
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the … CWE-22
Path Traversal 		CVE-2020-11705 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210047 6.1 MEDIUM
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. Get… CWE-79
Cross-site Scripting 		CVE-2020-11704 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210048 7.5 HIGH
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter. CWE-74
Injection 		CVE-2020-11703 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210049 6.1 MEDIUM
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collab… CWE-79
Cross-site Scripting 		CVE-2020-11702 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm
210050 8.8 HIGH
Network 		provideserver provide_ftp_server An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting fi… CWE-352
 Origin Validation Error 		CVE-2020-11701 2024-11-21 13:58 2020-04-12 Show GitHub Exploit DB Packet Storm