Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253801	2.6	注意	HTC Corporation	-	複数の Android 用 HTC 製品における電話番号およびその他の重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-3975	2011-10-7 11:46	2011-10-3	Show	GitHub Exploit DB Packet Storm

253802	5	警告	FFmpeg	-	FFmpeg の decode_residual_inter 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3974	2011-10-7 11:33	2011-10-2	Show	GitHub Exploit DB Packet Storm

253803	4.3	警告	PunBB	-	PunBB の include/functions.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3371	2011-10-7 11:29	2011-10-2	Show	GitHub Exploit DB Packet Storm

253804	9	危険	ヒューレット・パッカード	-	HP NonStop Servers における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-2411	2011-10-7 11:26	2011-09-19	Show	GitHub Exploit DB Packet Storm

253805	4.3	警告	TWiki	-	TWiki におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3010	2011-10-7 11:20	2011-09-22	Show	GitHub Exploit DB Packet Storm

253806	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および SeaMonkey におけるキー操作を読み取られる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3866	2011-10-7 11:10	2011-09-27	Show	GitHub Exploit DB Packet Storm

253807	5	警告	FFmpeg	-	FFmpeg の libavcodec 内にある cavsdec.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3973	2011-10-7 10:59	2011-10-2	Show	GitHub Exploit DB Packet Storm

253808	6.8	警告	FFmpeg Libav	-	FFmpeg および libav の decode_residual_block 関数における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-3362	2011-10-7 10:58	2011-10-2	Show	GitHub Exploit DB Packet Storm

253809	-	-	Investintech.com Inc.	-	SlimPDF Reader に複数の脆弱性	-	-	2011-10-7 10:56	2011-10-4	Show	GitHub Exploit DB Packet Storm

253810	10	危険	Mozilla Foundation	-	Mozilla Firefox のプラグイン API におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2996	2011-10-5 16:27	2011-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208351	6.8	MEDIUM Network	xstream_project debian fedoraproject	xstream debian_linux fedora	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerabi…	-	CVE-2020-26259	2024-11-21 14:19	2020-12-16	Show	GitHub Exploit DB Packet Storm

208352	7.7	HIGH Network	xstream_project debian fedoraproject	xstream debian_linux fedora	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerabil…	-	CVE-2020-26258	2024-11-21 14:19	2020-12-16	Show	GitHub Exploit DB Packet Storm

208353	5.3	MEDIUM Network	wireshark fedoraproject debian oracle	wireshark fedora debian_linux zfs_storage_appliance_kit	Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.	CWE-125 Out-of-bounds Read	CVE-2020-26421	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208354	5.3	MEDIUM Network	wireshark fedoraproject oracle	wireshark fedora zfs_storage_appliance_kit	Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-26420	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208355	5.3	MEDIUM Network	wireshark fedoraproject oracle	wireshark fedora zfs_storage_appliance_kit	Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-26419	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208356	5.3	MEDIUM Network	wireshark fedoraproject debian oracle	wireshark fedora debian_linux zfs_storage_appliance_kit	Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-26418	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208357	5.3	MEDIUM Network	ethereum	go_ethereum	Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where…	CWE-682 Incorrect Calculation	CVE-2020-26265	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208358	6.5	MEDIUM Network	ethereum	go_ethereum	Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetPr…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-26264	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208359	4.3	MEDIUM Network	gitlab	gitlab	A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2). Using a specific query name for a project se…	CWE-404 Improper Resource Shutdown or Release	CVE-2020-26411	2024-11-21 14:19	2020-12-11	Show	GitHub Exploit DB Packet Storm

208360	5.3	MEDIUM Network	gitlab	gitlab	Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.	CWE-200 Information Exposure	CVE-2020-26417	2024-11-21 14:19	2020-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed