Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250061	2.6	注意	Puppet	-	Puppet および Puppet Enterprise Users における Puppet master になりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2011-3872	2011-11-4 15:03	2011-10-24	Show	GitHub Exploit DB Packet Storm

250062	6.2	警告	Puppet	-	Puppet Labs の Puppet における任意の Puppet コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3871	2011-11-4 15:02	2011-09-30	Show	GitHub Exploit DB Packet Storm

250063	6.3	警告	Puppet	-	Puppet Labs の Puppet における任意のファイルのパーミッションを変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2011-3870	2011-11-4 15:01	2011-09-30	Show	GitHub Exploit DB Packet Storm

250064	6.3	警告	Puppet	-	Puppet Labs の Puppet における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2011-3869	2011-11-4 15:01	2011-09-30	Show	GitHub Exploit DB Packet Storm

250065	5	警告	Puppet	-	Puppet Labs の Puppet におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-3848	2011-11-4 15:00	2011-09-28	Show	GitHub Exploit DB Packet Storm

250066	4.3	警告	アップル	-	WebObjects におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3998	2011-11-4 14:03	2011-11-4	Show	GitHub Exploit DB Packet Storm

250067	6.4	警告	Opengear	-	複数の Opengear 製品における認証回避の脆弱性	CWE-287 不適切な認証	CVE-2011-3997	2011-11-4 14:02	2011-11-4	Show	GitHub Exploit DB Packet Storm

250068	9.3	危険	アップル	-	Windows 上で稼動する Apple QuickTime における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-3251	2011-11-4 11:52	2011-10-26	Show	GitHub Exploit DB Packet Storm

250069	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-3250	2011-11-4 11:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

250070	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3249	2011-11-4 11:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199241	7.5	HIGH Network	expertpdf	expertpdf	A local file inclusion vulnerability in ExpertPDF 9.5.0 through 14.1.0 allows attackers to read the file contents from files that the running ExpertPDF process has access to read.	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-35340	2024-11-21 14:27	2021-09-15	Show	GitHub Exploit DB Packet Storm

199242	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1 in Nef_S2/SNC_io_parser.h SNC_io_parser::read_sface() store_sm_boundary_item() Sloop_of OOB r…	-	CVE-2020-35635	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199243	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() s…	-	CVE-2020-35634	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199244	8.8	HIGH Network	cgal debian	computational_geometry_algorithms_library debian_linux	A code execution vulnerability exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. An oob read vulnerability exists in Nef_S2/SNC_io_parser.h SNC_io_parser<EW>::read_sface() s…	-	CVE-2020-35633	2024-11-21 14:27	2021-08-31	Show	GitHub Exploit DB Packet Storm

199245	7.5	HIGH Network	hcc-embedded siemens	nichestack 7km9300-0ae02-0aa0_firmware	An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the ICMP checksum. When …	CWE-125 Out-of-bounds Read	CVE-2020-35683	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199246	9.1	CRITICAL Network	hcc-embedded siemens	nichestack sentron_3wa_com190_firmware sentron_3wl_com35_firmware	An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connections derives the ISN from an insufficiently random source. As a result, an attack…	CWE-330 Use of Insufficiently Random Values	CVE-2020-35685	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199247	7.5	HIGH Network	hcc-embedded siemens	nichestack sentron_3wl_com35_firmware sentron_3wa_com190_firmware	An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP payload size (extracted from the IP header) to compute the length of the TCP pay…	CWE-20 Improper Input Validation	CVE-2020-35684	2024-11-21 14:27	2021-08-19	Show	GitHub Exploit DB Packet Storm

199248	9.8	CRITICAL Network	phpgurukul	employee_record_management_system	SQL injection vulnerability in PHPGurukul Employee Record Management System 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication.	CWE-89 SQL Injection	CVE-2020-35427	2024-11-21 14:27	2021-07-20	Show	GitHub Exploit DB Packet Storm

199249	6.1	MEDIUM Network	fiyo	fiyo_cms	In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.	CWE-79 Cross-site Scripting	CVE-2020-35373	2024-11-21 14:27	2021-06-18	Show	GitHub Exploit DB Packet Storm

199250	7.3	HIGH Network	apache debian fedoraproject oracle	http_server debian_linux fedora instantis_enterprisetrack enterprise_manager_ops_center zfs_storage_appliance_kit	Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP …	CWE-787 Out-of-bounds Write	CVE-2020-35452	2024-11-21 14:27	2021-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed