Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253301	7.5	危険	Automattic Inc.	-	WordPress 用 Jetpack プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4673	2011-12-6 16:26	2011-12-2	Show	GitHub Exploit DB Packet Storm

253302	7.5	危険	Valid	-	Valid tiny-erp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4672	2011-12-6 16:25	2011-12-2	Show	GitHub Exploit DB Packet Storm

253303	7.5	危険	AdRotate Plugin	-	WordPress 用 AdRotate プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4671	2011-12-6 16:24	2011-12-2	Show	GitHub Exploit DB Packet Storm

253304	10	危険	Iron Mountain	-	Iron Mountain Connected Backup の Agent service における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2397	2011-12-6 16:22	2011-12-5	Show	GitHub Exploit DB Packet Storm

253305	6.4	警告	Widelands	-	Widelands の io/filesystem/filesystem.cc におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1932	2011-12-6 16:22	2011-12-5	Show	GitHub Exploit DB Packet Storm

253306	4.3	警告	Etomite Project	-	Etomite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4264	2011-12-6 12:01	2011-12-6	Show	GitHub Exploit DB Packet Storm

253307	7.5	危険	jonkemp	-	WordPress 用 WordPress Users プラグインの wp-users.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4669	2011-12-5 16:08	2011-12-2	Show	GitHub Exploit DB Packet Storm

253308	7.5	危険	IBM	-	IBM Tivoli Netcool/Reporter における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4668	2011-12-5 16:07	2011-12-2	Show	GitHub Exploit DB Packet Storm

253309	5	警告	Schneider Electric	-	Schneider Electric の複数の製品におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-4036	2011-12-5 16:06	2011-10-24	Show	GitHub Exploit DB Packet Storm

253310	4.3	警告	Schneider Electric	-	Schneider Electric の複数の製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4035	2011-12-5 16:05	2011-10-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208051	9.8	CRITICAL Network	easycorp	zentao	The EasyCorp ZenTao PMS 12.4.2 application suffers from an arbitrary file upload vulnerability. An attacker can upload arbitrary webshell to the server by using the downloadZipPackage() function.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28165	2024-11-21 14:22	2021-08-12	Show	GitHub Exploit DB Packet Storm

208052	8.8	HIGH Network	tinyobjloader_project	tinyobjloader	An improper array index validation vulnerability exists in the LoadObj functionality of tinyobjloader v2.0-rc1 and tinyobjloader development commit 79d4421. A specially crafted file could lead to cod…	CWE-129 Improper Validation of Array Index	CVE-2020-28589	2024-11-21 14:22	2021-08-11	Show	GitHub Exploit DB Packet Storm

208053	5.3	MEDIUM Network	siemens	cpu_1504d_tf_firmware cpu_1507d_tf_firmware cpu_1515sp_pc2_tf_firmware simatic_s7_plcsim_advanced_firmware simatic_s7-1500_software_controller tim_1531_irc_firmware cpu_1211c_firmwa…	A vulnerability has been identified in SIMATIC Drive Controller family (All versions < V2.9.2), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V21.9), SIMATIC…	CWE-863 Incorrect Authorization	CVE-2020-28397	2024-11-21 14:22	2021-08-10	Show	GitHub Exploit DB Packet Storm

208054	9.8	CRITICAL Network	jeecg	jeecg_boot	An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28088	2024-11-21 14:22	2021-08-7	Show	GitHub Exploit DB Packet Storm

208055	7.5	HIGH Network	jeecg	jeecg_boot	A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information.	CWE-89 SQL Injection	CVE-2020-28087	2024-11-21 14:22	2021-08-7	Show	GitHub Exploit DB Packet Storm

208056	7.5	HIGH Network	siemens	dk_standard_ethernet_controller_evaluation_kit_firmware ek-ertec_200_evaulation_kit_firmware ek-ertec_200p_evaluation_kit_firmware ruggedcom_rm1224_firmware scalance_m-800_firmware sca…	Affected devices contain a vulnerability that allows an unauthenticated attacker to trigger a denial-of-service condition. The vulnerability can be triggered if a large amount of DCP reset packets ar…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-28400	2024-11-21 14:22	2021-07-13	Show	GitHub Exploit DB Packet Storm

208057	7.8	HIGH Local	prusa3d	prusaslicer	An out-of-bounds write vulnerability exists in the Admesh stl_fix_normal_directions() functionality of Prusa Research PrusaSlicer 2.2.0 and Master (commit 4b040b856). A specially crafted AMF file can…	CWE-787 Out-of-bounds Write	CVE-2020-28598	2024-11-21 14:22	2021-07-8	Show	GitHub Exploit DB Packet Storm

208058	4.3	MEDIUM Network	dovecot fedoraproject	dovecot fedora	The Sieve engine in Dovecot before 2.3.15 allows Uncontrolled Resource Consumption, as demonstrated by a situation with a complex regular expression for the regex extension.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-28200	2024-11-21 14:22	2021-06-28	Show	GitHub Exploit DB Packet Storm

208059	5.9	MEDIUM Physics	linux netapp	linux_kernel cloud_backup h410c_firmware h300s_firmware h500s_firmware h700s_firmware h300e_firmware h500e_firmware h700e_firmware h410s_firmware	The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.	CWE-125 Out-of-bounds Read	CVE-2020-28097	2024-11-21 14:22	2021-06-24	Show	GitHub Exploit DB Packet Storm

208060	7.5	HIGH Network	gulpjs oracle	glob-parent communications_cloud_native_core_policy	This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-28469	2024-11-21 14:22	2021-06-4	Show	GitHub Exploit DB Packet Storm