Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254801	2.1	注意	freedesktop.org サイバートラスト株式会社レッドハット	-	D-Bus におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4352	2011-04-27 11:26	2010-12-30	Show	GitHub Exploit DB Packet Storm

254802	-	-	foolabs	-	Foolabs Xpdf にサービス運用妨害 (DoS) の脆弱性	-	-	2011-04-26 12:35	2011-03-22	Show	GitHub Exploit DB Packet Storm

254803	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark におけるサービス運用妨害 (メモリ消費) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1141	2011-04-26 12:28	2011-02-28	Show	GitHub Exploit DB Packet Storm

254804	9.3	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の wiretap/pcapng.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0024	2011-04-26 12:25	2010-08-29	Show	GitHub Exploit DB Packet Storm

254805	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の NTLMSSP 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-1143	2011-04-26 12:24	2010-08-29	Show	GitHub Exploit DB Packet Storm

254806	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の dissect_ms_compressed_string および dissect_mscldap_string 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1140	2011-04-26 12:23	2011-02-22	Show	GitHub Exploit DB Packet Storm

254807	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の wiretap/pcapng.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1139	2011-04-26 12:21	2011-02-7	Show	GitHub Exploit DB Packet Storm

254808	6.8	警告	Wireshark レッドハット	-	Wireshark の wiretap/dct3trace.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0713	2011-04-26 12:20	2011-02-16	Show	GitHub Exploit DB Packet Storm

254809	6.8	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2011-0538	2011-04-26 11:51	2011-02-3	Show	GitHub Exploit DB Packet Storm

254810	10	危険	IBM	-	IBM Lotus Domino の POP3 および IMAP サービスにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0919	2011-04-26 11:45	2011-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208381	7.8	HIGH Local	acronis	true_image	Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration.	NVD-CWE-noinfo	CVE-2020-25736	2024-11-21 14:18	2021-07-16	Show	GitHub Exploit DB Packet Storm

208382	6.7	MEDIUM Local	acronis	true_image	Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions.	CWE-276 Incorrect Default Permissions	CVE-2020-25593	2024-11-21 14:18	2021-07-16	Show	GitHub Exploit DB Packet Storm

208383	5.4	MEDIUM Network	codologic	codoforum	A stored cross site scripting (XSS) vulnerability in the 'Manage Users' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload enter…	CWE-79 Cross-site Scripting	CVE-2020-25879	2024-11-21 14:18	2021-07-10	Show	GitHub Exploit DB Packet Storm

208384	4.8	MEDIUM Network	blackcat-cms	blackcat_cms	A stored cross site scripting (XSS) vulnerability in the 'Admin-Tools' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payloads enter…	CWE-79 Cross-site Scripting	CVE-2020-25878	2024-11-21 14:18	2021-07-10	Show	GitHub Exploit DB Packet Storm

208385	5.4	MEDIUM Network	blackcat-cms	blackcat_cms	A stored cross site scripting (XSS) vulnerability in the 'Add Page' feature of BlackCat CMS 1.3.6 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered…	CWE-79 Cross-site Scripting	CVE-2020-25877	2024-11-21 14:18	2021-07-10	Show	GitHub Exploit DB Packet Storm

208386	5.4	MEDIUM Network	codologic	codoforum	A stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into t…	CWE-79 Cross-site Scripting	CVE-2020-25876	2024-11-21 14:18	2021-07-10	Show	GitHub Exploit DB Packet Storm

208387	5.4	MEDIUM Network	codologic	codoforum	A stored cross site scripting (XSS) vulnerability in the 'Smileys' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into…	CWE-79 Cross-site Scripting	CVE-2020-25875	2024-11-21 14:18	2021-07-10	Show	GitHub Exploit DB Packet Storm

208388	6.1	MEDIUM Network	icewarp	webclient	Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.	CWE-79 Cross-site Scripting	CVE-2020-25925	2024-11-21 14:18	2021-07-7	Show	GitHub Exploit DB Packet Storm

208389	7.5	HIGH Network	pexip	pexip_infinity	Pexip Infinity 22.x through 24.x before 24.2 has Improper Input Validation for call setup. An unauthenticated remote attacker can trigger a software abort (temporary loss of service).	CWE-20 Improper Input Validation	CVE-2020-25868	2024-11-21 14:18	2021-07-7	Show	GitHub Exploit DB Packet Storm

208390	8.8	HIGH Network	enphase	envoy_firmware	An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /installer/upgrade_start allows remote authenticated users to execute arbitrary comma…	CWE-78 OS Command	CVE-2020-25755	2024-11-21 14:18	2021-06-17	Show	GitHub Exploit DB Packet Storm