Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253081 4.3 警告 Phorum - Phorum の admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4561 2011-11-30 16:24 2011-11-28 Show GitHub Exploit DB Packet Storm
253082 3.5 注意 Drupal - Drupal の Petition Node モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4560 2011-11-30 16:23 2011-10-5 Show GitHub Exploit DB Packet Storm
253083 7.5 危険 Vtiger - vTiger CRM の Calendar モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4559 2011-11-30 16:22 2011-11-28 Show GitHub Exploit DB Packet Storm
253084 4.3 警告 Contao - Contao におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4335 2011-11-29 16:28 2011-11-28 Show GitHub Exploit DB Packet Storm
253085 4.3 警告 Dolibarr ERP & CRM - Dolibarr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4329 2011-11-29 16:27 2011-11-8 Show GitHub Exploit DB Packet Storm
253086 4.3 警告 Ruby on Rails project - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4319 2011-11-29 16:26 2011-11-28 Show GitHub Exploit DB Packet Storm
253087 4.3 警告 Combodo - Combodo iTop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4275 2011-11-29 16:23 2011-11-26 Show GitHub Exploit DB Packet Storm
253088 9.3 危険 SunPlus Electronics - DVR Remote ActiveX コントロールの DVRemoteAx.ax における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3828 2011-11-29 16:22 2011-11-26 Show GitHub Exploit DB Packet Storm
253089 6.8 警告 IBM - IBM TS3100 および TS3200 テープ・ライブラリにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-1372 2011-11-29 16:15 2011-11-23 Show GitHub Exploit DB Packet Storm
253090 1.9 注意 ヒューレット・パッカード
IBM
- IBM WebSphere MQ における listener プロセス強制終了の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-1378 2011-11-29 16:14 2011-11-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215781 6.5 MEDIUM
Network
castel nextgen_dvr_firmware Castel NextGen DVR v1.0.0 is vulnerable to CSRF in all state-changing request. A __RequestVerificationToken is set by the web interface, and included in requests sent by web interface. However, this … CWE-352
 Origin Validation Error
CVE-2020-11682 2024-11-21 13:58 2020-06-5 Show GitHub Exploit DB Packet Storm
215782 8.1 HIGH
Network
castel nextgen_dvr_firmware Castel NextGen DVR v1.0.0 stores and displays credentials for the associated SMTP server in cleartext. Low privileged users can exploit this to create an administrator user and obtain the SMTP creden… CWE-522
 Insufficiently Protected Credentials
CVE-2020-11681 2024-11-21 13:58 2020-06-5 Show GitHub Exploit DB Packet Storm
215783 6.5 MEDIUM
Network
castel nextgen_dvr_firmware Castel NextGen DVR v1.0.0 is vulnerable to authorization bypass on all administrator functionality. The application fails to check that a request was submitted by an administrator. Consequently, a no… CWE-862
 Missing Authorization
CVE-2020-11680 2024-11-21 13:58 2020-06-5 Show GitHub Exploit DB Packet Storm
215784 8.8 HIGH
Network
castel nextgen_dvr_firmware Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fails to check that the request was submitte… CWE-862
 Missing Authorization
CVE-2020-11679 2024-11-21 13:58 2020-06-5 Show GitHub Exploit DB Packet Storm
215785 9.8 CRITICAL
Network
microfocus service_management_automation Incorrect Authorization vulnerability in Micro Focus Container Deployment Foundation component affects products: - Hybrid Cloud Management. Versions 2018.05 to 2019.11. - ArcSight Investigate. versio… CWE-863
 Incorrect Authorization
CVE-2020-11844 2024-11-21 13:58 2020-05-30 Show GitHub Exploit DB Packet Storm
215786 8.8 HIGH
Network
vivotek cc9381-hv_firmware
fd9360-h_firmware
fd9368-htv_firmware
fd9380-h_firmware
fd9388-htv_firmware
ib9360-h_firmware
ib9368-ht_firmware
ib9380-h_firmware
ib9388-ht_firmware
it9…
VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to upload and execute a script (with resultant execution of OS commands). For … CWE-78
OS Command 
CVE-2020-11950 2024-11-21 13:58 2020-05-28 Show GitHub Exploit DB Packet Storm
215787 6.5 MEDIUM
Network
vivotek cc9381-hv_firmware
fd9360-h_firmware
fd9368-htv_firmware
fd9380-h_firmware
fd9388-htv_firmware
ib9360-h_firmware
ib9368-ht_firmware
ib9380-h_firmware
ib9388-ht_firmware
it9…
testserver.cgi of the web service on VIVOTEK Network Cameras before XXXXX-VVTK-2.2002.xx.01x (and before XXXXX-VVTK-0XXXX_Beta2) allows an authenticated user to obtain arbitrary files from a camera's… NVD-CWE-noinfo
CVE-2020-11949 2024-11-21 13:58 2020-05-28 Show GitHub Exploit DB Packet Storm
215788 9.8 CRITICAL
Network
panasonic eluga_ray_530_firmware
eluga_ray_600_firmware
p110_firmware
eluga_z1_pro_firmware
eluga_x1_firmware
eluga_x1_pro_firmware
Panasonic P110, Eluga Z1 Pro, Eluga X1, and Eluga X1 Pro devices through 2020-04-10 have Insecure Permissions. NOTE: the vendor states that all affected products are at "End-of-software-support." CWE-276
Incorrect Default Permissions 
CVE-2020-11716 2024-11-21 13:58 2020-05-20 Show GitHub Exploit DB Packet Storm
215789 8.8 HIGH
Network
ifax
avantfax
hylafax
avantfax
sendfax.php in iFAX AvantFAX before 3.3.6 and HylaFAX Enterprise Web Interface before 0.2.5 allows authenticated Command Injection. CWE-78
OS Command 
CVE-2020-11766 2024-11-21 13:58 2020-05-20 Show GitHub Exploit DB Packet Storm
215790 9.8 CRITICAL
Network
panasonic p99_firmware Panasonic P99 devices through 2020-04-10 have Incorrect Access Control. NOTE: the vendor states that all affected products are at "End-of-software-support." NVD-CWE-noinfo
CVE-2020-11715 2024-11-21 13:58 2020-05-20 Show GitHub Exploit DB Packet Storm