Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253101 7.8 危険 シスコシステムズ - Cisco TelePresence Multipoint Switch デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-0389 2011-11-29 10:32 2011-02-23 Show GitHub Exploit DB Packet Storm
253102 7.8 危険 シスコシステムズ - Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 CWE-399
リソース管理の問題
CVE-2011-0388 2011-11-29 10:31 2011-02-23 Show GitHub Exploit DB Packet Storm
253103 8 危険 シスコシステムズ - Cisco TelePresence Multipoint Switch (CTMS) デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0387 2011-11-29 10:31 2011-02-23 Show GitHub Exploit DB Packet Storm
253104 9.3 危険 シスコシステムズ - Cisco TelePresence Recording Server 上の XML-RPC の実装におけるファイルを上書きされる脆弱性 CWE-94
コード・インジェクション
CVE-2011-0386 2011-11-29 10:30 2011-02-23 Show GitHub Exploit DB Packet Storm
253105 10 危険 シスコシステムズ - Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 CWE-Other
その他
CVE-2011-0385 2011-11-29 10:29 2011-02-23 Show GitHub Exploit DB Packet Storm
253106 10 危険 シスコシステムズ - Cisco TelePresence Multipoint Switch における任意のコードを実行される脆弱性 CWE-287
不適切な認証
CVE-2011-0384 2011-11-29 10:28 2011-02-23 Show GitHub Exploit DB Packet Storm
253107 10 危険 シスコシステムズ - Cisco TelePresence Recording Server および Cisco TelePresence Multipoint Switch における脆弱性 CWE-287
不適切な認証
CVE-2011-0383 2011-11-29 10:27 2011-02-23 Show GitHub Exploit DB Packet Storm
253108 10 危険 シスコシステムズ - Cisco TelePresence Recording Server における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2011-0382 2011-11-29 09:55 2011-02-23 Show GitHub Exploit DB Packet Storm
253109 10 危険 シスコシステムズ - Cisco TelePresence Manager における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2011-0381 2011-11-29 09:55 2011-02-23 Show GitHub Exploit DB Packet Storm
253110 7.5 危険 シスコシステムズ - Cisco TelePresence Manager における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-0380 2011-11-29 09:54 2011-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215811 9.8 CRITICAL
Network
qt qt setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. CWE-416
 Use After Free
CVE-2020-12267 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215812 9.8 CRITICAL
Network
decompress_project decompress The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal. CWE-22
CWE-59
Path Traversal
Link Following
CVE-2020-12265 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215813 7.8 HIGH
Local
avira antivirus Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink. CWE-59
Link Following
CVE-2020-12254 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215814 6.5 MEDIUM
Adjacent
bluezone bluezone React Native Bluetooth Scan in Bluezone 1.0.0 uses six-character alphanumeric IDs, which might make it easier for remote attackers to interfere with COVID-19 contact tracing by using many IDs. NOTE: … CWE-330
 Use of Insufficiently Random Values
CVE-2020-12270 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215815 7.5 HIGH
Network
advanced-woo-search advanced_woo_search The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-se… CWE-200
Information Exposure
CVE-2020-12070 2024-11-21 13:59 2020-04-25 Show GitHub Exploit DB Packet Storm
215816 6.1 MEDIUM
Network
grafana grafana Grafana before 6.7.3 allows table-panel XSS via column.title or cellLinkTooltip. CWE-79
Cross-site Scripting
CVE-2020-12245 2024-11-21 13:59 2020-04-25 Show GitHub Exploit DB Packet Storm
215817 6.1 MEDIUM
Network
gnu
debian
fedoraproject
canonical
opensuse
mailman
debian_linux
fedora
ubuntu_linux
leap
backports_sle
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP repl… CWE-79
Cross-site Scripting
CVE-2020-12137 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
215818 5.5 MEDIUM
Local
whoopsie_project
mongodb
whoopsie
c_driver
bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow … CWE-190
 Integer Overflow or Wraparound
CVE-2020-12135 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
215819 9.8 CRITICAL
Network
nanometrics titansma
centaur
Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log. CWE-772
 Missing Release of Resource after Effective Lifetime
CVE-2020-12134 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm
215820 6.1 MEDIUM
Network
fifthplay s.a.m.i Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request. CWE-79
Cross-site Scripting
CVE-2020-12132 2024-11-21 13:59 2020-04-24 Show GitHub Exploit DB Packet Storm