Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255171 1.9 注意 サイバートラスト株式会社
VMware
Linux
レッドハット		 - Linux kernel の mext_check_arguments 関数におけるファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2066 2011-03-3 13:26 2010-06-2 Show GitHub Exploit DB Packet Storm
255172 6.5 警告 IBM - IBM DB2 における non-DDL ステートメントを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0757 2011-03-2 16:40 2011-01-28 Show GitHub Exploit DB Packet Storm
255173 4.3 警告 シングス - 複数のシングス CGI 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0455 2011-03-2 16:01 2011-03-2 Show GitHub Exploit DB Packet Storm
255174 5 警告 The PHP Group - PHP の mt_rand 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0755 2011-03-1 15:57 2010-12-9 Show GitHub Exploit DB Packet Storm
255175 4.4 警告 The PHP Group - PHP の SplFileInfo::getType 関数におけるシンボリックリンク攻撃の脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-0754 2011-03-1 15:55 2010-12-9 Show GitHub Exploit DB Packet Storm
255176 4.3 警告 The PHP Group - PHP の PCNTL 拡張におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態 		CVE-2011-0753 2011-03-1 15:54 2010-12-9 Show GitHub Exploit DB Packet Storm
255177 5 警告 The PHP Group - PHP の extract 関数におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0752 2011-03-1 15:52 2010-12-8 Show GitHub Exploit DB Packet Storm
255178 5 警告 日立 - JP1/NETM/DM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2011-03-1 15:26 2011-01-31 Show GitHub Exploit DB Packet Storm
255179 7.5 危険 IBM - IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-0731 2011-03-1 15:17 2011-01-28 Show GitHub Exploit DB Packet Storm
255180 7.8 危険 ISC, Inc.
レッドハット		 - ISC DHCPv6 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0413 2011-03-1 15:10 2011-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215811 6.1 MEDIUM
Network 		bitcoin-abe_project bitcoin-abe Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception. CWE-79
Cross-site Scripting 		CVE-2020-11944 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215812 7.5 HIGH
Network 		zohocorp manageengine_opmanager Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. CWE-306
Missing Authentication for Critical Function 		CVE-2020-11946 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215813 8.8 HIGH
Network 		sonatype nexus_repository_manager_3 An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks withou… CWE-863
 Incorrect Authorization 		CVE-2020-11753 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215814 6.1 MEDIUM
Network 		python-markdown2_project python-markdown2 python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute. CWE-79
Cross-site Scripting 		CVE-2020-11888 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215815 6.1 MEDIUM
Network 		gtranslate translate_wordpress_with_gtranslate The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. CWE-79
Cross-site Scripting 		CVE-2020-11930 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215816 9.8 CRITICAL
Network 		davidlingren media_library_assistant In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin. NVD-CWE-noinfo
CVE-2020-11928 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215817 9.1 CRITICAL
Network 		libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read 		CVE-2020-11895 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215818 9.1 CRITICAL
Network 		libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read 		CVE-2020-11894 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215819 6.1 MEDIUM
Network 		svg2png_project svg2png svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. CWE-79
Cross-site Scripting 		CVE-2020-11887 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
215820 8.1 HIGH
Network 		opennms horizon
meridian 		OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Mer… CWE-89
SQL Injection 		CVE-2020-11886 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm