Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253691	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格またはサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1985	2011-10-21 15:24	2011-10-11	Show	GitHub Exploit DB Packet Storm

253692	9.3	危険	マイクロソフト	-	Microsoft Windows Vista および Windows 7 の Windows Media Center における権限昇格の脆弱性	CWE-Other その他	CVE-2011-2009	2011-10-21 15:24	2011-10-11	Show	GitHub Exploit DB Packet Storm

253693	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Active Accessibility コンポーネントにおける権限昇格の脆弱性	CWE-Other その他	CVE-2011-1247	2011-10-21 15:23	2011-10-11	Show	GitHub Exploit DB Packet Storm

253694	4	警告	マイクロソフト	-	複数の Microsoft 製品における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2011-1892	2011-10-21 15:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

253695	4.3	警告	マイクロソフト	-	Microsoft Windows SharePoint Services および SharePoint Foundation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1891	2011-10-21 15:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

253696	4.3	警告	マイクロソフト	-	複数の Microsoft SharePoint 製品の EditForm.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1890	2011-10-21 15:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

253697	4.3	警告	マイクロソフト	-	複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0653	2011-10-21 15:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

253698	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2001	2011-10-21 11:55	2011-10-11	Show	GitHub Exploit DB Packet Storm

253699	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2000	2011-10-21 11:50	2011-10-11	Show	GitHub Exploit DB Packet Storm

253700	5	警告	マイクロソフト	-	Microsoft Host Integration Server におけるサービス運用妨害 (SNA サーバサービスの休止) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2008	2011-10-21 11:49	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215841	9.8	CRITICAL Network	rukovoditel	rukovoditel	In Rukovoditel 2.5.2, attackers can upload arbitrary file to the server by just changing the content-type value. As a result of that, an attacker can execute a command on the server. This specific at…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-11815	2024-11-21 13:58	2020-04-17	Show	GitHub Exploit DB Packet Storm

215842	5.4	MEDIUM Network	qdpm	qdpm	A Host Header Injection vulnerability in qdPM 9.1 may allow an attacker to spoof a particular header and redirect users to malicious websites.	CWE-74 Injection	CVE-2020-11814	2024-11-21 13:58	2020-04-17	Show	GitHub Exploit DB Packet Storm

215843	5.4	MEDIUM Network	rukovoditel	rukovoditel	In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the configuration page via the copyright text input. Thus, an attacker can inject a malicious script to steal all users' valuable data. Th…	CWE-79 Cross-site Scripting	CVE-2020-11813	2024-11-21 13:58	2020-04-17	Show	GitHub Exploit DB Packet Storm

215844	9.8	CRITICAL Network	rukovoditel	rukovoditel	Rukovoditel 2.5.2 is affected by a SQL injection vulnerability because of improper handling of the filters[0][value] or filters[1][value] parameter.	CWE-89 SQL Injection	CVE-2020-11812	2024-11-21 13:58	2020-04-17	Show	GitHub Exploit DB Packet Storm

215845	9.8	CRITICAL Network	qdpm	qdpm	In qdPM 9.1, an attacker can upload a malicious .php file to the server by exploiting the Add Profile Photo capability with a crafted content-type value. After that, the attacker can execute an arbit…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-11811	2024-11-21 13:58	2020-04-17	Show	GitHub Exploit DB Packet Storm

215846	6.5	MEDIUM Network	broadcom	ca_api_developer_portal	CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive information.	NVD-CWE-noinfo	CVE-2020-11660	2024-11-21 13:58	2020-04-16	Show	GitHub Exploit DB Packet Storm

215847	4.3	MEDIUM Network	broadcom	ca_api_developer_portal	CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administration action.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-11659	2024-11-21 13:58	2020-04-16	Show	GitHub Exploit DB Packet Storm

215848	9.8	CRITICAL Network	broadcom	ca_api_developer_portal	CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-11658	2024-11-21 13:58	2020-04-16	Show	GitHub Exploit DB Packet Storm

215849	8.8	HIGH Network	broadcom	ca_api_developer_portal	CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.	NVD-CWE-noinfo	CVE-2020-11666	2024-11-21 13:58	2020-04-16	Show	GitHub Exploit DB Packet Storm

215850	6.1	MEDIUM Network	broadcom	ca_api_developer_portal	CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform open redirect attacks.	CWE-601 Open Redirect	CVE-2020-11665	2024-11-21 13:58	2020-04-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed