Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253301	9.3	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3400	2011-12-16 11:35	2011-12-13	Show	GitHub Exploit DB Packet Storm

253302	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品の ENCDEC.DLL における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3401	2011-12-16 11:34	2011-12-13	Show	GitHub Exploit DB Packet Storm

253303	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3412	2011-12-16 11:32	2011-12-13	Show	GitHub Exploit DB Packet Storm

253304	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3411	2011-12-16 11:31	2011-12-13	Show	GitHub Exploit DB Packet Storm

253305	9.3	危険	マイクロソフト	-	Microsoft Publisher における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-3410	2011-12-16 11:25	2011-12-13	Show	GitHub Exploit DB Packet Storm

253306	9.3	危険	マイクロソフト	-	Microsoft Publisher 2003 および 2007 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-1508	2011-12-16 11:19	2011-12-13	Show	GitHub Exploit DB Packet Storm

253307	9.3	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-3397	2011-12-16 11:16	2011-12-13	Show	GitHub Exploit DB Packet Storm

253308	9.3	危険	マイクロソフト	-	複数の Microsoft Office 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1983	2011-12-16 11:15	2011-12-13	Show	GitHub Exploit DB Packet Storm

253309	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の簡体字中国語版 Microsoft Office IME における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2010	2011-12-16 11:09	2011-12-13	Show	GitHub Exploit DB Packet Storm

253310	4.3	警告	Dolibarr ERP & CRM	-	Dolibarr におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4814	2011-12-16 10:52	2011-11-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202941	9.8	CRITICAL Network	cd-messenger_project	cd-messenger	cd-messenger through 2.7.26 is vulnerable to Arbitrary Code Execution. User input provided to the `color` argument executed by the `eval` function resulting in code execution.	CWE-94 Code Injection	CVE-2020-7675	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202942	9.8	CRITICAL Network	access-policy_project	access-policy	access-policy through 3.1.0 is vulnerable to Arbitrary Code Execution. User input provided to the `template` function is executed by the `eval` function resulting in code execution.	CWE-94 Code Injection	CVE-2020-7674	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202943	9.8	CRITICAL Network	node-extend_project	node-extend	node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument `A` of `extend` function`(A,B,as,isAargs)` located within `lib/extend.js` is executed by the `…	CWE-94 Code Injection	CVE-2020-7673	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202944	7.8	HIGH Local	siemens	simatic_pcs_7 simatic_step_7 sinamics_starter simatic_process_device_manager	A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All version…	-	CVE-2020-7586	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202945	7.8	HIGH Local	siemens	simatic_pcs_7 simatic_step_7 sinamics_starter simatic_process_device_manager	A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3), SIMATIC PDM (All versions < V9.2), SIMATIC STEP 7 V5.X (All version…	-	CVE-2020-7585	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202946	6.7	MEDIUM Local	siemens	simatic_pcs_7 simatic_wincc simatic_wincc_runtime_advanced sinema_server simatic_net_pc simatic_prosave simatic_pcs_neo simatic_automatic_tool simatic_step_7 simatic_wincc_…	A vulnerability has been identified in SIMATIC Automation Tool (All versions < V4 SP2), SIMATIC NET PC Software V14 (All versions < V14 SP1 Update 14), SIMATIC NET PC Software V15 (All versions), SIM…	-	CVE-2020-7580	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202947	8.6	HIGH Network	mosc_project	mosc	mosc through 1.0.0 is vulnerable to Arbitrary Code Execution. User input provided to `properties` argument is executed by the `eval` function, resulting in code execution.	CWE-94 Code Injection	CVE-2020-7672	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202948	7.5	HIGH Network	goliath_project	goliath	goliath through 1.0.6 allows request smuggling attacks where goliath is used as a backend and a frontend proxy also being vulnerable. It is possible to conduct HTTP request smuggling attacks by sendi…	CWE-444 HTTP Request Smuggling	CVE-2020-7671	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202949	7.5	HIGH Network	ohler	agoo	agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possibl…	CWE-444 HTTP Request Smuggling	CVE-2020-7670	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

202950	6.8	MEDIUM Physics	freebsd netapp	freebsd clustered_data_ontap	In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-7456	2024-11-21 14:37	2020-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed