Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256621	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1885	2011-07-22 10:50	2011-07-12	Show	GitHub Exploit DB Packet Storm

256622	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1881	2011-07-22 10:49	2011-07-12	Show	GitHub Exploit DB Packet Storm

256623	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1880	2011-07-22 10:47	2011-07-12	Show	GitHub Exploit DB Packet Storm

256624	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1884	2011-07-22 10:46	2011-07-12	Show	GitHub Exploit DB Packet Storm

256625	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1883	2011-07-22 10:46	2011-07-12	Show	GitHub Exploit DB Packet Storm

256626	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1882	2011-07-22 10:45	2011-07-12	Show	GitHub Exploit DB Packet Storm

256627	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1879	2011-07-22 10:44	2011-07-12	Show	GitHub Exploit DB Packet Storm

256628	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1878	2011-07-21 10:30	2011-07-12	Show	GitHub Exploit DB Packet Storm

256629	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1877	2011-07-21 10:29	2011-07-12	Show	GitHub Exploit DB Packet Storm

256630	7.2	危険	マイクロソフト	-	Microsoft Windows の win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1876	2011-07-21 10:28	2011-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
217481	9.8	CRITICAL Network	mz-automation	libiec61850	In libIEC61850 before version 1.4.3, when a message with COTP message length field with value < 4 is received an integer underflow will happen leading to heap buffer overflow. This can cause an appli…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-15158	2024-11-21 14:04	2020-08-27	Show	GitHub Exploit DB Packet Storm

217482	8.5	HIGH Network	cogboard	red_discord_bot	Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to in…	CWE-74 Injection	CVE-2020-15147	2024-11-21 14:04	2020-08-22	Show	GitHub Exploit DB Packet Storm

217483	9.6	CRITICAL Network	cogboard	red_discord_bot	In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia …	CWE-74 Injection	CVE-2020-15140	2024-11-21 14:04	2020-08-22	Show	GitHub Exploit DB Packet Storm

217484	8.8	HIGH Network	zulip	zulip_server	Zulip Server 2.x before 2.1.7 allows eval injection if a privileged attacker were able to write directly to the postgres database, and chose to write a crafted custom profile field value.	CWE-94 Code Injection	CVE-2020-15070	2024-11-21 14:04	2020-08-21	Show	GitHub Exploit DB Packet Storm

217485	8.0	HIGH Network	openmage magento	openmage_long_term_support magento	OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks. …	CWE-352 Origin Validation Error	CVE-2020-15151	2024-11-21 14:04	2020-08-20	Show	GitHub Exploit DB Packet Storm

217486	8.8	HIGH Network	sylius	syliusresourcebundle	In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, request parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized prop…	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2020-15146	2024-11-21 14:04	2020-08-20	Show	GitHub Exploit DB Packet Storm

217487	8.8	HIGH Network	sylius	syliusresourcebundle	In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2 and 1.6.4, rrequest parameters injected inside an expression evaluated by `symfony/expression-language` package haven't been sanitized pro…	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2020-15143	2024-11-21 14:04	2020-08-20	Show	GitHub Exploit DB Packet Storm

217488	5.4	MEDIUM Network	auth0	lock	In auth0-lock versions before and including 11.25.1, dangerouslySetInnerHTML is used to update the DOM. When dangerouslySetInnerHTML is used, the application and its users might be exposed to cross-s…	CWE-79 Cross-site Scripting	CVE-2020-15119	2024-11-21 14:04	2020-08-20	Show	GitHub Exploit DB Packet Storm

217489	9.9	CRITICAL Network	nodebb	nodebb	NodeBB before version 1.14.3 has a bug introduced in version 1.12.2 in the validation logic that makes it possible to change the password of any user on a running NodeBB forum by sending a specially …	CWE-287 Improper Authentication	CVE-2020-15149	2024-11-21 14:04	2020-08-20	Show	GitHub Exploit DB Packet Storm

217490	9.1	CRITICAL Network	contiki-ng	contiki-ng	Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified dur…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2020-14937	2024-11-21 14:04	2020-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed