Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253161 | 5 | 警告 | osCSS | - | osCSS の catalog/content.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4713 | 2011-12-13 15:01 | 2011-11-8 | Show | GitHub Exploit DB Packet Storm |
| 253162 | 5 | 警告 | monoxide0184 | - | Oxide WebServer におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4712 | 2011-12-13 14:59 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253163 | 5 | 警告 | Namazu Project | - | Namazu の namazu.cgi におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4711 | 2011-12-13 14:57 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253164 | 7.5 | 危険 | Lucid Crew | - | Pixie CMS における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4710 | 2011-12-13 14:53 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253165 | 4.3 | 警告 | Hotaru CMS | - | Hotaru CMS の Search プラグイン内にある Hotaru.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4709 | 2011-12-13 14:52 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253166 | 4.3 | 警告 | IBM | - | IBM Rational Asset Manager におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4708 | 2011-12-13 14:51 | 2011-05-5 | Show | GitHub Exploit DB Packet Storm |
| 253167 | 4.3 | 警告 | SAP | - | SAP Netweaver の Virus Scan Interface におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4707 | 2011-12-13 14:50 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253168 | 5 | 警告 | Igor Sysoev | - | nginx におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4315 | 2011-12-13 14:49 | 2011-11-15 | Show | GitHub Exploit DB Packet Storm |
| 253169 | 7.5 | 危険 | Mambo Foundation | - | Mambo CMS の administrator/index2.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-2917 | 2011-12-13 14:41 | 2011-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253170 | 6.8 | 警告 | MIT Kerberos | - | MIT Kerberos の process_tgs_req 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-1530 | 2011-12-13 14:40 | 2011-12-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 5, 2026, 4:11 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 207961 | 7.5 |
HIGH
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
NVD-CWE-noinfo
|
CVE-2020-29057 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207962 | 6.1 |
MEDIUM
Network |
hrsale | hrsale | HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. |
CWE-79
Cross-site Scripting |
CVE-2020-29053 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207963 | 9.8 |
CRITICAL
Network |
cdatatec cdata |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-78
OS Command |
CVE-2020-29056 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207964 | 5.9 |
MEDIUM
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-319
Cleartext Transmission of Sensitive Information |
CVE-2020-29055 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207965 | 9.8 |
CRITICAL
Network |
cdatatec |
72408a_firmware 9008a_firmware 9016a_firmware 92408a_firmware 92416a_firmware 9288_firmware 97016_firmware 97024p_firmware 97028p_firmware 97042p_firmware 97084p_firmwar… |
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN,… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-29054 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207966 | 9.8 |
CRITICAL
Network |
karenderia_multiple_restaurant_system_project | karenderia_multiple_restaurant_system | A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various … |
CWE-89
SQL Injection |
CVE-2020-28994 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207967 | 5.5 |
MEDIUM
Local |
musl-libc debian fedoraproject oracle |
musl debian_linux fedora graalvm |
In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow). |
CWE-787
Out-of-bounds Write |
CVE-2020-28928 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207968 | 8.8 |
HIGH
Local |
xen | xen | An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one … |
CWE-787 CWE-193 Out-of-bounds Write Off-by-one Error |
CVE-2020-29040 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207969 | 6.1 |
MEDIUM
Network |
seeddms | seeddms | Open redirect in SeedDMS 6.0.13 via the dropfolderfileform1 parameter to out/out.AddDocument.php. |
CWE-601
Open Redirect |
CVE-2020-28726 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |
| 207970 | 9.8 |
CRITICAL
Network |
misp | misp | MISP before 2.4.135 lacks an ACL check, related to app/Controller/GalaxyElementsController.php and app/Model/GalaxyElement.php. |
CWE-862
Missing Authorization |
CVE-2020-29006 | 2024-11-21 14:23 | 2020-11-25 | Show | GitHub Exploit DB Packet Storm |