Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256581	7.2	危険	アップル	-	Apple iOS の IOMobileFrameBuffer における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-0227	2011-07-27 10:31	2011-07-19	Show	GitHub Exploit DB Packet Storm

256582	4.3	警告	Nagios Enterprises, LLC The Icinga Project	-	Nagios および Icinga におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2179	2011-07-27 10:25	2011-06-1	Show	GitHub Exploit DB Packet Storm

256583	4.3	警告	Nagios Enterprises, LLC	-	Nagios の statusmap.c におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1523	2011-07-27 10:24	2011-03-9	Show	GitHub Exploit DB Packet Storm

256584	2.1	注意	IBM	-	IBM WebSphere Application Server における重要なスタックトレース情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-1356	2011-07-27 10:24	2011-07-12	Show	GitHub Exploit DB Packet Storm

256585	5.8	警告	IBM	-	IBM WebSphere Application Server におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-1355	2011-07-27 10:23	2011-07-12	Show	GitHub Exploit DB Packet Storm

256586	6.8	警告	アップルサイバートラスト株式会社 FreeType Project レッドハット	-	FreeType の truetype/ttgxvar.c 内にある ft_var_readpackedpoints 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3855	2011-07-27 09:58	2010-11-16	Show	GitHub Exploit DB Packet Storm

256587	6.4	警告	ISC, Inc. IBM サイバートラスト株式会社オラクル VMware レッドハット	-	ISC BIND named validator に脆弱性	CWE-Other その他	CVE-2010-3614	2011-07-27 09:47	2010-12-2	Show	GitHub Exploit DB Packet Storm

256588	4	警告	ISC, Inc. IBM サイバートラスト株式会社ヒューレット・パッカードオラクル VMware レッドハット	-	ISC BIND におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3613	2011-07-27 09:46	2010-12-2	Show	GitHub Exploit DB Packet Storm

256589	5	警告	ISC, Inc. ターボリナックスレッドハットオラクル	-	ISC BIND にサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2011-1910	2011-07-27 09:43	2011-05-30	Show	GitHub Exploit DB Packet Storm

256590	5	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2621	2011-07-26 12:03	2011-06-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
207441	5.8	MEDIUM Network	twitter	secure_headers	In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_s…	CWE-74 Injection	CVE-2020-5216	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

207442	4.4	MEDIUM Network	privatebin	privatebin	In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a per…	CWE-79 Cross-site Scripting	CVE-2020-5223	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

207443	7.2	HIGH Network	troglobit	uftpd	In uftpd before 2.11, it is possible for an unauthenticated user to perform a directory traversal attack using multiple different FTP commands and read and write to arbitrary locations on the filesys…	CWE-22 Path Traversal	CVE-2020-5221	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

207444	5.5	MEDIUM Local	apt-cacher-ng_project debian opensuse	apt-cacher-ng debian_linux leap backports	apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via …	NVD-CWE-noinfo	CVE-2020-5202	2024-11-21 14:33	2020-01-22	Show	GitHub Exploit DB Packet Storm

207445	6.1	MEDIUM Network	phpgurukul	hospital_management_system	PHPGurukul Hospital Management System in PHP v4.0 suffers from multiple reflected XSS vulnerabilities via the searchdata or Doctorspecialization parameter.	CWE-79 Cross-site Scripting	CVE-2020-5193	2024-11-21 14:33	2020-01-15	Show	GitHub Exploit DB Packet Storm

207446	8.1	HIGH Network	cerberusftp	ftp_server	Cerberus FTP Server Enterprise Edition prior to versions 11.0.3 and 10.0.18 allows an authenticated attacker to create files, display hidden files, list directories, and list files without the permis…	CWE-276 Incorrect Default Permissions	CVE-2020-5196	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

207447	5.4	MEDIUM Network	cerberusftp	ftp_server	The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endpoint. Improper permission verification o…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-5194	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

207448	4.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) 5.1 through 12.6.1. It has Incorrect Access Control.	CWE-200 Information Exposure	CVE-2020-5197	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

207449	7.8	HIGH Local	sparklabs	viscosity	Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading t…	NVD-CWE-noinfo	CVE-2020-5180	2024-11-21 14:33	2020-01-15	Show	GitHub Exploit DB Packet Storm

207450	6.1	MEDIUM Network	cerberusftp	ftp_server	Reflected XSS through an IMG element in Cerberus FTP Server prior to versions 11.0.1 and 10.0.17 allows a remote attacker to execute arbitrary JavaScript or HTML via a crafted public folder URL. This…	CWE-79 Cross-site Scripting	CVE-2020-5195	2024-11-21 14:33	2020-01-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed