Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253661 7.2 危険 Schneider Electric - 複数の Schneider Electric 製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3330 2011-11-14 12:23 2011-09-21 Show GitHub Exploit DB Packet Storm
253662 5 警告 Mozilla Foundation - Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい
CVE-2011-3653 2011-11-14 11:45 2011-11-8 Show GitHub Exploit DB Packet Storm
253663 2.6 注意 Mozilla Foundation - Mozilla Firefox および Thunderbird における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい
CVE-2011-3649 2011-11-14 11:39 2011-11-8 Show GitHub Exploit DB Packet Storm
253664 10 危険 アドビシステムズ - Adobe Shockwave Player の TextXtra モジュールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2449 2011-11-14 11:36 2011-11-8 Show GitHub Exploit DB Packet Storm
253665 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2448 2011-11-14 11:35 2011-11-8 Show GitHub Exploit DB Packet Storm
253666 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2447 2011-11-14 11:34 2011-11-8 Show GitHub Exploit DB Packet Storm
253667 10 危険 アドビシステムズ - Adobe Shockwave Player の DIRapi ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2446 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
253668 9.3 危険 マイクロソフト - Microsoft Windows の Windows Mail および Windows Meeting Space における権限昇格の脆弱性 CWE-Other
その他
CVE-2011-2016 2011-11-14 11:24 2011-11-8 Show GitHub Exploit DB Packet Storm
253669 9 危険 マイクロソフト - Microsoft Windows の LDAP over SSL 実装における証明書の制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-2014 2011-11-14 11:22 2011-11-8 Show GitHub Exploit DB Packet Storm
253670 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-2013 2011-11-14 11:21 2011-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208111 7.8 HIGH
Local
trendmicro apex_one A vulnerability in Trend Micro Apex One could allow an unprivileged user to abuse the product installer to reinstall the agent with additional malicious code in the context of a higher privilege. NVD-CWE-noinfo
CVE-2020-28572 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208112 7.5 HIGH
Network
golang go Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via malicious gcc flags specified via a #cgo directive. CWE-94
Code Injection
CVE-2020-28367 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208113 7.5 HIGH
Network
golang
fedoraproject
netapp
go
fedora
trident
cloud_insights_telegraf_agent
Code injection in the go command with cgo before Go 1.14.12 and Go 1.15.5 allows arbitrary code execution at build time via a malicious unquoted symbol name in a linked object file. CWE-94
Code Injection
CVE-2020-28366 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208114 7.5 HIGH
Network
golang
fedoraproject
netapp
go
fedora
trident
cloud_insights_telegraf_agent
Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service. CWE-295
Improper Certificate Validation 
CVE-2020-28362 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208115 7.5 HIGH
Network
cxuu cxuucms cxuucms v3 has a SQL injection vulnerability, which can lead to the leakage of all database data via the keywords parameter via search.php. CWE-89
SQL Injection
CVE-2020-28091 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208116 6.5 MEDIUM
Network
tp-link tl-wpa4220_firmware httpd on TP-Link TL-WPA4220 devices (hardware versions 2 through 4) allows remote authenticated users to trigger a buffer overflow (causing a denial of service) by sending a POST request to the /admi… CWE-120
Classic Buffer Overflow
CVE-2020-28005 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208117 5.4 MEDIUM
Network
kamailio kamailio Kamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. … CWE-444
HTTP Request Smuggling
CVE-2020-28361 2024-11-21 14:22 2020-11-18 Show GitHub Exploit DB Packet Storm
208118 9.8 CRITICAL
Network
water_billing_system_project water_billing_system SQL injection vulnerability in SourceCodester Water Billing System 1.0 via the username and password parameters to process.php. CWE-89
SQL Injection
CVE-2020-28183 2024-11-21 14:22 2020-11-18 Show GitHub Exploit DB Packet Storm
208119 6.1 MEDIUM
Network
pescms pescms_team PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id= CWE-79
Cross-site Scripting
CVE-2020-28092 2024-11-21 14:22 2020-11-18 Show GitHub Exploit DB Packet Storm
208120 9.8 CRITICAL
Network
online_library_management_system_project online_library_management_system An Arbitrary File Upload in the Upload Image component in SourceCodester Online Library Management System 1.0 allows the user to conduct remote code execution via admin/borrower/index.php?view=add be… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-28130 2024-11-21 14:22 2020-11-18 Show GitHub Exploit DB Packet Storm