Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252741 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における Cookie をキャプチャされる脆弱性 CWE-200
情報漏えい 		CVE-2011-4849 2011-12-20 14:11 2011-12-16 Show GitHub Exploit DB Packet Storm
252742 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4848 2011-12-20 14:10 2011-12-16 Show GitHub Exploit DB Packet Storm
252743 7.5 危険 Parallels - Parallels Plesk Panel の Control Panel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4847 2011-12-20 12:23 2011-12-16 Show GitHub Exploit DB Packet Storm
252744 4.3 警告 Parallels - Parallels Plesk Panel の Site Editor 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4777 2011-12-20 12:23 2011-12-16 Show GitHub Exploit DB Packet Storm
252745 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4776 2011-12-20 12:22 2011-12-16 Show GitHub Exploit DB Packet Storm
252746 10 危険 Parallels - Parallels Plesk Small Business Panel の Site Editor 機能における詳細不明な脆弱性 CWE-DesignError
CVE-2011-4768 2011-12-20 12:21 2011-12-16 Show GitHub Exploit DB Packet Storm
252747 5 警告 Parallels - Parallels Plesk Small Business Panel の Site Editor 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4767 2011-12-20 12:21 2011-12-16 Show GitHub Exploit DB Packet Storm
252748 4.3 警告 Parallels - Parallels Plesk Small Business Panel の Site Editor 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-4765 2011-12-20 12:12 2011-12-16 Show GitHub Exploit DB Packet Storm
252749 4.3 警告 Parallels - Parallels Plesk Small Business Panel の Site Editor 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4764 2011-12-20 12:11 2011-12-16 Show GitHub Exploit DB Packet Storm
252750 7.5 危険 Parallels - Parallels Plesk Small Business Panel の Site Editor 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4763 2011-12-20 12:11 2011-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208591 8.4 HIGH
Local 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys … CWE-306
Missing Authentication for Critical Function 		CVE-2020-25621 2024-11-21 14:18 2020-12-17 Show GitHub Exploit DB Packet Storm
208592 7.8 HIGH
Local 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to t… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-25620 2024-11-21 14:18 2020-12-17 Show GitHub Exploit DB Packet Storm
208593 4.4 MEDIUM
Local 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwardi… NVD-CWE-Other
CVE-2020-25619 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208594 8.8 HIGH
Network 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as … CWE-78
OS Command  		CVE-2020-25618 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208595 8.8 HIGH
Network 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), le… CWE-22
Path Traversal 		CVE-2020-25617 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208596 8.8 HIGH
Network 		dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_… 		An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to … CWE-20
CWE-78
 Improper Input Validation 
OS Command  		CVE-2020-25759 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208597 8.8 HIGH
Network 		dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_… 		An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into s… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-25758 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208598 8.8 HIGH
Adjacent 		dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_… 		A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with r… CWE-20
CWE-78
 Improper Input Validation 
OS Command  		CVE-2020-25757 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208599 7.8 HIGH
Local 		x.org
redhat 		x_server
enterprise_linux 		A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data … - CVE-2020-25712 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
208600 6.5 MEDIUM
Network 		microfocus filr Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive… NVD-CWE-noinfo
CVE-2020-25838 2024-11-21 14:18 2020-12-11 Show GitHub Exploit DB Packet Storm