Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257781	4.3	警告	オラクル	-	Oracle OpenSSO における認証の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3506	2011-10-27 16:14	2011-10-18	Show	GitHub Exploit DB Packet Storm

257782	2.1	注意	オラクル	-	Oracle Sun Products Suite の Oracle Communications Unified コンポーネントおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2327	2011-10-27 16:14	2011-10-18	Show	GitHub Exploit DB Packet Storm

257783	7.5	危険	オラクル	-	Oracle Sun Products Suite の Oracle Waveset コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2310	2011-10-27 16:12	2011-10-18	Show	GitHub Exploit DB Packet Storm

257784	7.8	危険	オラクル	-	Oracle Solaris 11 Express における iSCSI DataMover の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3543	2011-10-27 16:11	2011-10-18	Show	GitHub Exploit DB Packet Storm

257785	4.9	警告	オラクル	-	Oracle Solaris における Kernel/Performance Counter BackEnd Module の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3542	2011-10-27 16:10	2011-10-18	Show	GitHub Exploit DB Packet Storm

257786	5.6	警告	オラクル	-	Oracle Solaris における Process File System (procfs) の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3515	2011-10-27 16:09	2011-10-18	Show	GitHub Exploit DB Packet Storm

257787	9.3	危険	オラクル	-	Oracle Solaris における LDAP library の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-3508	2011-10-27 16:09	2011-10-18	Show	GitHub Exploit DB Packet Storm

257788	4.3	警告	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2011-2313	2011-10-27 16:08	2011-10-18	Show	GitHub Exploit DB Packet Storm

257789	5	警告	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile Product Supplier Collaboration for Process コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-3532	2011-10-27 16:06	2011-10-18	Show	GitHub Exploit DB Packet Storm

257790	4.3	警告	オラクル	-	Oracle Industry Applications の Health Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2011-2323	2011-10-27 10:07	2011-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246211	6.5	MEDIUM Network	atlassian	universal_plugin_manager	The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perfo…	CWE-611 XXE	CVE-2018-20233	2024-11-21 13:01	2019-01-19	Show	GitHub Exploit DB Packet Storm

246212	7.5	HIGH Network	winscp	winscp	In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SC…	CWE-20 Improper Input Validation	CVE-2018-20684	2024-11-21 13:01	2019-01-11	Show	GitHub Exploit DB Packet Storm

246213	5.3	MEDIUM Network	openbsd winscp netapp debian canonical redhat oracle fujitsu siemens	openssh winscp cloud_backup element_software storage_automation_store ontap_select_deploy steelstore_cloud_integrated_storage debian_linux ubuntu_linux enterprise_linux …	In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the tar…	CWE-863 Incorrect Authorization	CVE-2018-20685	2024-11-21 13:01	2019-01-11	Show	GitHub Exploit DB Packet Storm

246214	8.1	HIGH Network	gitolite	gitolite	commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v,…	CWE-20 Improper Input Validation	CVE-2018-20683	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246215	5.4	MEDIUM Network	fork-cms	fork_cms	Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).	CWE-79 Cross-site Scripting	CVE-2018-20682	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246216	6.1	MEDIUM Physics	mate-desktop	mate-screensaver	mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycli…	CWE-200 Information Exposure	CVE-2018-20681	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246217	4.8	MEDIUM Network	frog_cms_project	frog_cms	Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.	CWE-79 Cross-site Scripting	CVE-2018-20680	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246218	7.5	HIGH Network	busybox canonical	busybox ubuntu_linux	An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information fro…	CWE-125 Out-of-bounds Read	CVE-2018-20679	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246219	6.1	MEDIUM Network	getbootstrap	bootstrap	In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.	CWE-79 Cross-site Scripting	CVE-2018-20677	2024-11-21 13:01	2019-01-9	Show	GitHub Exploit DB Packet Storm

246220	6.1	MEDIUM Network	getbootstrap	bootstrap	In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.	CWE-79 Cross-site Scripting	CVE-2018-20676	2024-11-21 13:01	2019-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed