Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253341 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1995 2011-10-21 15:35 2011-10-11 Show GitHub Exploit DB Packet Storm
253342 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1993 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
253343 7.2 危険 マイクロソフト - Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2005 2011-10-21 15:34 2011-10-11 Show GitHub Exploit DB Packet Storm
253344 5 警告 マイクロソフト - Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2012 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
253345 9.3 危険 マイクロソフト - Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1969 2011-10-21 15:31 2011-10-11 Show GitHub Exploit DB Packet Storm
253346 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1897 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
253347 4.3 警告 マイクロソフト - Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1896 2011-10-21 15:30 2011-10-11 Show GitHub Exploit DB Packet Storm
253348 9.3 危険 マイクロソフト - Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2011-1895 2011-10-21 15:28 2011-10-11 Show GitHub Exploit DB Packet Storm
253349 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-1253 2011-10-21 15:27 2011-10-11 Show GitHub Exploit DB Packet Storm
253350 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2011 2011-10-21 15:26 2011-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208291 9.8 CRITICAL
Network 		abb symphony_\+_historian
symphony_\+_operations 		In S+ Operations and S+ Historian, a successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the … CWE-89
SQL Injection 		CVE-2020-24673 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
208292 8.0 HIGH
Adjacent 		dlink dsl2888a_firmware An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It contains an execute_cmd.cgi feature (that is not reachable via the web user interface) that lets an … CWE-78
OS Command  		CVE-2020-24581 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
208293 7.5 HIGH
Adjacent 		dlink dsl2888a_firmware An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. Lack of authentication functionality allows an attacker to assign a static IP address that was once use… CWE-306
Missing Authentication for Critical Function 		CVE-2020-24580 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
208294 8.8 HIGH
Adjacent 		dlink dsl2888a_firmware An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass authentication to access authenticated pages and functionality. CWE-287
Improper Authentication 		CVE-2020-24579 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
208295 6.5 MEDIUM
Adjacent 		dlink dsl2888a_firmware An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and do… CWE-427
CWE-732
 Uncontrolled Search Path Element
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-24578 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
208296 3.3 LOW
Local 		mitel micontact_center_business The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization. NVD-CWE-noinfo
CVE-2020-24693 2024-11-21 14:15 2020-12-18 Show GitHub Exploit DB Packet Storm
208297 7.2 HIGH
Network 		arubanetworks arubaos
sd-wan 		Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity… NVD-CWE-noinfo
CVE-2020-24637 2024-11-21 14:15 2020-12-11 Show GitHub Exploit DB Packet Storm
208298 9.8 CRITICAL
Network 		arubanetworks arubaos
sd-wan 		An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor control… CWE-77
Command Injection 		CVE-2020-24634 2024-11-21 14:15 2020-12-11 Show GitHub Exploit DB Packet Storm
208299 9.8 CRITICAL
Network 		arubanetworks arubaos
sd-wan 		There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management pr… CWE-120
Classic Buffer Overflow 		CVE-2020-24633 2024-11-21 14:15 2020-12-11 Show GitHub Exploit DB Packet Storm
208300 4.8 MEDIUM
Network 		user_registration_\&_login_and_user_management_system_project user_registration_\&_login_and_user_management_system Cross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1. CWE-79
Cross-site Scripting 		CVE-2020-24723 2024-11-21 14:15 2020-11-18 Show GitHub Exploit DB Packet Storm