Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252461	7.5	危険	オラクル	-	Oracle Sun Products Suite の Oracle Waveset コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2310	2011-10-27 16:12	2011-10-18	Show	GitHub Exploit DB Packet Storm

252462	7.8	危険	オラクル	-	Oracle Solaris 11 Express における iSCSI DataMover の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3543	2011-10-27 16:11	2011-10-18	Show	GitHub Exploit DB Packet Storm

252463	4.9	警告	オラクル	-	Oracle Solaris における Kernel/Performance Counter BackEnd Module の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3542	2011-10-27 16:10	2011-10-18	Show	GitHub Exploit DB Packet Storm

252464	5.6	警告	オラクル	-	Oracle Solaris における Process File System (procfs) の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3515	2011-10-27 16:09	2011-10-18	Show	GitHub Exploit DB Packet Storm

252465	9.3	危険	オラクル	-	Oracle Solaris における LDAP library の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3508	2011-10-27 16:09	2011-10-18	Show	GitHub Exploit DB Packet Storm

252466	4.3	警告	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2313	2011-10-27 16:08	2011-10-18	Show	GitHub Exploit DB Packet Storm

252467	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile Product Supplier Collaboration for Process コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3532	2011-10-27 16:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

252468	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2323	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

252469	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Clinical、Remote Data Capture における脆弱性	CWE-noinfo 情報不足	CVE-2011-2309	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

252470	6.8	警告	オラクル	-	Oracle Virtualization の Sun Ray コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3538	2011-10-27 10:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209141	7.5	HIGH Network	tinyexr_project	tinyexr	tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).	CWE-129 Improper Validation of Array Index	CVE-2020-18430	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209142	7.5	HIGH Network	tinyexr_project	tinyexr	tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).	CWE-129 Improper Validation of Array Index	CVE-2020-18428	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209143	9.8	CRITICAL Network	autohotkey	autohotkey	A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges.	NVD-CWE-noinfo	CVE-2020-18174	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209144	7.8	HIGH Local	1password	1password	A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code.	CWE-427 Uncontrolled Search Path Element	CVE-2020-18173	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209145	9.8	CRITICAL Network	trezor	bridge	A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges.	CWE-94 Code Injection	CVE-2020-18172	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209146	8.8	HIGH Local	techsmith	snagit	TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use o…	CWE-269 Improper Privilege Management	CVE-2020-18171	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209147	9.8	CRITICAL Network	abloy	key_manager	An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions.	NVD-CWE-Other	CVE-2020-18170	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209148	7.8	HIGH Local	techsmith	snagit	A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to…	CWE-269 Improper Privilege Management	CVE-2020-18169	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209149	9.8	CRITICAL Network	twothink_project	twothink	A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.	NVD-CWE-noinfo	CVE-2020-17952	2024-11-21 14:08	2021-07-27	Show	GitHub Exploit DB Packet Storm

209150	9.8	CRITICAL Network	intelliants	subrion	SQL Injection vulnerability in Subrion CMS v4.2.1 in the search page if a website uses a PDO connection.	CWE-89 SQL Injection	CVE-2020-18155	2024-11-21 14:08	2021-07-15	Show	GitHub Exploit DB Packet Storm