Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254601 4.3 警告 Apache Software Foundation
Steinar H. Gunderson		 - Steinar H. Gunderson mpm-itk Multi-Processing Module における権限を取得される脆弱性 CWE-16
環境設定 		CVE-2011-1176 2011-05-19 11:04 2011-03-29 Show GitHub Exploit DB Packet Storm
254602 4.9 警告 IBM
Apache Software Foundation
アップル
サイバートラスト株式会社
ヒューレット・パッカード
ターボリナックス
オラクル
レッドハット		 - Apache HTTP Server における AllowOverride ディレクティブの処理に関する権限昇格の脆弱性 CWE-16
環境設定 		CVE-2009-1195 2011-05-19 09:46 2009-05-28 Show GitHub Exploit DB Packet Storm
254603 4.3 警告 KDE project
レッドハット		 - KDE SC の Konqueror 内にある KHTMLPart::htmlError 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1168 2011-05-18 18:30 2011-04-21 Show GitHub Exploit DB Packet Storm
254604 4.3 警告 KDE project
レッドハット		 - kdelibs の kio/kio/tcpslavebase.cpp における任意の SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1094 2011-05-18 18:26 2011-04-21 Show GitHub Exploit DB Packet Storm
254605 5.8 警告 KDE project
レッドハット		 - KDE SC の KGet 内にある KGetMetalink::File::isValidNameAttr 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-1586 2011-05-18 18:25 2011-04-21 Show GitHub Exploit DB Packet Storm
254606 9.3 危険 アドビシステムズ - 複数の Adobe 製品の CoolType ライブラリにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0610 2011-05-18 18:24 2011-04-21 Show GitHub Exploit DB Packet Storm
254607 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0861 2011-05-18 18:23 2011-04-19 Show GitHub Exploit DB Packet Storm
254608 5.5 警告 オラクル - Oracle PeopleSoft Enterprise HRMS における Global Payroll - Spain に関する脆弱性 CWE-noinfo
情報不足 		CVE-2011-0860 2011-05-18 18:21 2011-04-19 Show GitHub Exploit DB Packet Storm
254609 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
CWE-noinfo
CVE-2010-3777 2011-05-18 10:37 2010-12-9 Show GitHub Exploit DB Packet Storm
254610 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-119
CWE-noinfo
CVE-2010-3776 2011-05-18 10:35 2010-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202551 8.8 HIGH
Network 		riken xoonips SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2020-5659 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
202552 7.5 HIGH
Network 		mitsubishielectric melsec_iq-r00_firmware
melsec_iq-r01_firmware
melsec_iq-r02_firmware
melsec_iq-r04_firmware
melsec_iq-r16_firmware
melsec_iq-r08_firmware
melsec_iq-r32_firmware
melsec_iq-r120_fi… 		Uncontrolled resource consumption vulnerability in MELSEC iQ-R Series CPU Modules (R00/01/02CPU Firmware versions from '05' to '19' and R04/08/16/32/120(EN)CPU Firmware versions from '35' to '51') al… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5666 2024-11-21 14:34 2020-11-16 Show GitHub Exploit DB Packet Storm
202553 7.8 HIGH
Local 		nagios nagios_xi Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users being able to write to… CWE-281
 Improper Preservation of Permissions 		CVE-2020-5796 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
202554 7.5 HIGH
Network 		valvesoftware game_networking_sockets Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from li… NVD-CWE-noinfo
CVE-2020-6019 2024-11-21 14:34 2020-11-14 Show GitHub Exploit DB Packet Storm
202555 7.8 HIGH
Local 		nvidia geforce_now NVIDIA GeForce NOW application software on Windows, all versions prior to 2.0.25.119, contains a vulnerability in its open-source software dependency in which the OpenSSL library is vulnerable to bin… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-5992 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
202556 9.8 CRITICAL
Network 		vmware pivotal_scheduler Scheduler for TAS prior to version 1.4.0 was permitting plaintext transmission of UAA client token by sending it over a non-TLS connection. This also depended on the configuration of the MySQL server… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-5426 2024-11-21 14:34 2020-11-12 Show GitHub Exploit DB Packet Storm
202557 6.9 MEDIUM
Physics 		dell inspiron_15_7579_firmware Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2020-5388 2024-11-21 14:34 2020-11-11 Show GitHub Exploit DB Packet Storm
202558 7.8 HIGH
Local 		tenable nessus_network_monitor A vulnerability in Nessus Network Monitor versions 5.11.0, 5.11.1, and 5.12.0 for Windows could allow an authenticated local attacker to execute arbitrary code by copying user-supplied files to a spe… NVD-CWE-noinfo
CVE-2020-5794 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
202559 6.2 MEDIUM
Physics 		tp-link archer_a7_firmware UNIX Symbolic Link (Symlink) Following in TP-Link Archer A7(US)_V5_200721 allows an authenticated admin user, with physical access and network access, to execute arbitrary code after plugging a craft… CWE-59
Link Following 		CVE-2020-5795 2024-11-21 14:34 2020-11-7 Show GitHub Exploit DB Packet Storm
202560 5.5 MEDIUM
Local 		wantedlyinc studyplus Studyplus App for Android v6.3.7 and earlier and Studyplus App for iOS v8.29.0 and earlier use a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external … CWE-798
 Use of Hard-coded Credentials 		CVE-2020-5667 2024-11-21 14:34 2020-11-6 Show GitHub Exploit DB Packet Storm