Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252791	5	警告	SmarterTools Inc.	-	SmarterTools SmarterStats における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-4751	2011-12-19 16:17	2011-12-16	Show	GitHub Exploit DB Packet Storm

252792	4.3	警告	SmarterTools Inc.	-	SmarterTools SmarterStats におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4750	2011-12-19 16:16	2011-12-16	Show	GitHub Exploit DB Packet Storm

252793	4.6	警告	ヒューレット・パッカード IBM オラクル	-	HP ALM 内の getInstalledPackages 関数における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4834	2011-12-19 15:08	2011-12-15	Show	GitHub Exploit DB Packet Storm

252794	7.5	危険	SugarCRM	-	SugarCRM の Leads モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4833	2011-12-19 15:08	2011-12-15	Show	GitHub Exploit DB Packet Storm

252795	7.5	危険	Moxiecode Systems AB phpMyFAQ PHPletter	-	複数の製品で使用される inc/function.base.php における PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4825	2011-12-19 15:07	2011-10-25	Show	GitHub Exploit DB Packet Storm

252796	7.5	危険	The Cacti Group	-	Cacti の auth_login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4824	2011-12-19 15:06	2011-09-26	Show	GitHub Exploit DB Packet Storm

252797	4.3	警告	Atlassian	-	Atlassian FishEye のユーザプロファイル機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4822	2011-12-19 15:05	2011-10-24	Show	GitHub Exploit DB Packet Storm

252798	3.6	注意	Artsoft Entertainment	-	Artsoft Entertainment の Rocks'n'Diamonds における任意のファイルを上書きされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4606	2011-12-19 15:05	2011-12-15	Show	GitHub Exploit DB Packet Storm

252799	4.3	警告	Digium	-	Asterisk の channels/chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-200 情報漏えい	CVE-2011-4598	2011-12-19 15:03	2011-11-2	Show	GitHub Exploit DB Packet Storm

252800	5	警告	Digium	-	Asterisk の UDP 実装での SIP におけるユーザ名を列挙される脆弱性	CWE-200 情報漏えい	CVE-2011-4597	2011-12-19 15:01	2011-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202421	8.8	HIGH Network	google fedoraproject opensuse debian	chrome fedora leap backports_sle debian_linux	Use after free in audio in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	CWE-416 Use After Free	CVE-2020-6423	2024-11-21 14:35	2020-04-14	Show	GitHub Exploit DB Packet Storm

202422	8.8	HIGH Network	sap	netweaver_knowledge_management_and_collaboration_\(kmc-wpc\) netweaver_knowledge_management_and_collaboration_\(kmc-cm\)	SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently validate path information provided by user…	CWE-22 Path Traversal	CVE-2020-6225	2024-11-21 14:35	2020-04-15	Show	GitHub Exploit DB Packet Storm

202423	6.1	MEDIUM Network	communilink	clink_office	A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via the lang parameter.	CWE-79 Cross-site Scripting	CVE-2020-6171	2024-11-21 14:35	2020-04-7	Show	GitHub Exploit DB Packet Storm

202424	8.1	HIGH Network	gnu fedoraproject debian	glibc fedora debian_linux	An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a…	-	CVE-2020-6096	2024-11-21 14:35	2020-04-2	Show	GitHub Exploit DB Packet Storm

202425	7.5	HIGH Network	gstreamer_project opensuse	gst-rtsp-server leap backports_sle	An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference r…	CWE-476 NULL Pointer Dereference	CVE-2020-6095	2024-11-21 14:35	2020-03-28	Show	GitHub Exploit DB Packet Storm

202426	7.5	HIGH Network	videolabs debian	libmicrodns debian_linux	An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-6080	2024-11-21 14:35	2020-03-25	Show	GitHub Exploit DB Packet Storm

202427	7.5	HIGH Network	videolabs debian	libmicrodns debian_linux	An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-6079	2024-11-21 14:35	2020-03-25	Show	GitHub Exploit DB Packet Storm

202428	7.5	HIGH Network	videolabs debian	libmicrodns debian_linux	An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdns_recv, the return value of the mdns_read_h…	CWE-252 Unchecked Return Value	CVE-2020-6078	2024-11-21 14:35	2020-03-25	Show	GitHub Exploit DB Packet Storm

202429	7.5	HIGH Network	videolabs debian	libmicrodns debian_linux	An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track …	CWE-125 Out-of-bounds Read	CVE-2020-6077	2024-11-21 14:35	2020-03-25	Show	GitHub Exploit DB Packet Storm

202430	7.5	HIGH Network	videolabs debian	libmicrodns debian_linux	An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple…	CWE-190 Integer Overflow or Wraparound	CVE-2020-6073	2024-11-21 14:35	2020-03-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed