Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 27, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256241 | 4.3 | 警告 | Parallels | - | Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-4848 | 2011-12-20 14:10 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256242 | 7.5 | 危険 | Parallels | - | Parallels Plesk Panel の Control Panel における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4847 | 2011-12-20 12:23 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256243 | 4.3 | 警告 | Parallels | - | Parallels Plesk Panel の Site Editor 機能におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4777 | 2011-12-20 12:23 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256244 | 4.3 | 警告 | Parallels | - | Parallels Plesk Panel の Control Panel におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4776 | 2011-12-20 12:22 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256245 | 10 | 危険 | Parallels | - | Parallels Plesk Small Business Panel の Site Editor 機能における詳細不明な脆弱性 |
CWE-DesignError
|
CVE-2011-4768 | 2011-12-20 12:21 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256246 | 5 | 警告 | Parallels | - | Parallels Plesk Small Business Panel の Site Editor 機能における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-4767 | 2011-12-20 12:21 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256247 | 4.3 | 警告 | Parallels | - | Parallels Plesk Small Business Panel の Site Editor 機能における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-4765 | 2011-12-20 12:12 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256248 | 4.3 | 警告 | Parallels | - | Parallels Plesk Small Business Panel の Site Editor 機能におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4764 | 2011-12-20 12:11 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256249 | 7.5 | 危険 | Parallels | - | Parallels Plesk Small Business Panel の Site Editor 機能における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4763 | 2011-12-20 12:11 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
| 256250 | 10 | 危険 | Parallels | - | Parallels Plesk Small Business Panel における詳細不明な脆弱性 |
CWE-DesignError
|
CVE-2011-4762 | 2011-12-20 11:33 | 2011-12-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 28, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 207341 | 9.8 |
CRITICAL
Network |
safe-eval_project | safe-eval | This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine. |
CWE-94
Code Injection |
CVE-2020-7710 | 2024-11-21 14:37 | 2020-08-21 | Show | GitHub Exploit DB Packet Storm |
| 207342 | 6.9 |
MEDIUM
Local |
mcafee | total_protection | Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection (MTP) trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via man… |
CWE-269
Improper Privilege Management |
CVE-2020-7310 | 2024-11-21 14:37 | 2020-08-21 | Show | GitHub Exploit DB Packet Storm |
| 207343 | 9.8 |
CRITICAL
Network |
irrelon |
\@irrelon\/path irrelon-path |
The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7708 | 2024-11-21 14:37 | 2020-08-19 | Show | GitHub Exploit DB Packet Storm |
| 207344 | 9.8 |
CRITICAL
Network |
property-expr_project | property-expr | The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7707 | 2024-11-21 14:37 | 2020-08-18 | Show | GitHub Exploit DB Packet Storm |
| 207345 | 9.8 |
CRITICAL
Network |
connie-lang_project | connie-lang | The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7706 | 2024-11-21 14:37 | 2020-08-18 | Show | GitHub Exploit DB Packet Storm |
| 207346 | 9.8 |
CRITICAL
Network |
linux-cmdline_project | linux-cmdline | The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7704 | 2024-11-21 14:37 | 2020-08-18 | Show | GitHub Exploit DB Packet Storm |
| 207347 | 9.8 |
CRITICAL
Network |
nis-utils_project | nis-utils | All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7703 | 2024-11-21 14:37 | 2020-08-18 | Show | GitHub Exploit DB Packet Storm |
| 207348 | 9.8 |
CRITICAL
Network |
templ8_project | templ8 | All versions of package templ8 are vulnerable to Prototype Pollution via the parse function. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7702 | 2024-11-21 14:37 | 2020-08-17 | Show | GitHub Exploit DB Packet Storm |
| 207349 | 7.8 |
HIGH
Local |
siemens | automation_license_manager | A vulnerability has been identified in Automation License Manager 5 (All versions), Automation License Manager 6 (All versions < V6.0.8). The application does not properly validate the users' privile… |
CWE-863
Incorrect Authorization |
CVE-2020-7583 | 2024-11-21 14:37 | 2020-08-15 | Show | GitHub Exploit DB Packet Storm |
| 207350 | 9.8 |
CRITICAL
Network |
springtree | madlib-object-utils | madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue. |
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') |
CVE-2020-7701 | 2024-11-21 14:37 | 2020-08-15 | Show | GitHub Exploit DB Packet Storm |