Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250061 2.6 注意 Puppet - Puppet および Puppet Enterprise Users における Puppet master になりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-3872 2011-11-4 15:03 2011-10-24 Show GitHub Exploit DB Packet Storm
250062 6.2 警告 Puppet - Puppet Labs の Puppet における任意の Puppet コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-3871 2011-11-4 15:02 2011-09-30 Show GitHub Exploit DB Packet Storm
250063 6.3 警告 Puppet - Puppet Labs の Puppet における任意のファイルのパーミッションを変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-3870 2011-11-4 15:01 2011-09-30 Show GitHub Exploit DB Packet Storm
250064 6.3 警告 Puppet - Puppet Labs の Puppet における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2011-3869 2011-11-4 15:01 2011-09-30 Show GitHub Exploit DB Packet Storm
250065 5 警告 Puppet - Puppet Labs の Puppet におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-3848 2011-11-4 15:00 2011-09-28 Show GitHub Exploit DB Packet Storm
250066 4.3 警告 アップル - WebObjects におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3998 2011-11-4 14:03 2011-11-4 Show GitHub Exploit DB Packet Storm
250067 6.4 警告 Opengear - 複数の Opengear 製品における認証回避の脆弱性 CWE-287
不適切な認証 		CVE-2011-3997 2011-11-4 14:02 2011-11-4 Show GitHub Exploit DB Packet Storm
250068 9.3 危険 アップル - Windows 上で稼動する Apple QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-3251 2011-11-4 11:52 2011-10-26 Show GitHub Exploit DB Packet Storm
250069 9.3 危険 アップル - Apple QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-3250 2011-11-4 11:38 2011-10-28 Show GitHub Exploit DB Packet Storm
250070 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-3249 2011-11-4 11:38 2011-10-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199261 7.8 HIGH
Local 		linux
netapp 		linux_kernel
cloud_backup
solidfire_baseboard_management_controller_firmware
h300s_firmware
h500s_firmware
h700s_firmware
h300e_firmware
h500e_firmware
h700e_firmware
h410s… 		An out-of-bounds (OOB) memory access flaw was found in x25_bind in net/x25/af_x25.c in the Linux kernel version v5.12-rc5. A bounds check failure allows a local attacker with a user account on the sy… - CVE-2020-35519 2024-11-21 14:27 2021-05-7 Show GitHub Exploit DB Packet Storm
199262 9.8 CRITICAL
Network 		inxedu inxedu SQL Injection in com/inxedu/OS/edu/controller/letter/AdminMsgSystemController in Inxedu v2.0.6 via the ids parameter to admin/letter/delsystem. CWE-89
SQL Injection 		CVE-2020-35430 2024-11-21 14:27 2021-04-30 Show GitHub Exploit DB Packet Storm
199263 5.4 MEDIUM
Network 		unisys data_exchange_management_studio Unisys Data Exchange Management Studio through 5.0.34 doesn't sanitize the input to a HTML document field. This could be used for an XSS attack. CWE-79
Cross-site Scripting 		CVE-2020-35542 2024-11-21 14:27 2021-04-27 Show GitHub Exploit DB Packet Storm
199264 9.8 CRITICAL
Network 		wondercms wondercms A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary cod… CWE-78
OS Command  		CVE-2020-35314 2024-11-21 14:27 2021-04-21 Show GitHub Exploit DB Packet Storm
199265 9.8 CRITICAL
Network 		wondercms wondercms A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL t… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-35313 2024-11-21 14:27 2021-04-21 Show GitHub Exploit DB Packet Storm
199266 5.4 MEDIUM
Network 		monicahq monica Cross Site Scripting (XSS) in Monica before 2.19.1 via the journal page. CWE-79
Cross-site Scripting 		CVE-2020-35660 2024-11-21 14:27 2021-04-15 Show GitHub Exploit DB Packet Storm
199267 6.1 MEDIUM
Network 		group-office group_office Cross Site Scripting (XSS) in Group Office CRM 6.4.196 via the SET_LANGUAGE parameter. CWE-79
Cross-site Scripting 		CVE-2020-35419 2024-11-21 14:27 2021-04-15 Show GitHub Exploit DB Packet Storm
199268 5.4 MEDIUM
Network 		group-office group_office Cross Site Scripting (XSS) in the contact page of Group Office CRM 6.4.196 by uploading a crafted svg file. CWE-79
Cross-site Scripting 		CVE-2020-35418 2024-11-21 14:27 2021-04-15 Show GitHub Exploit DB Packet Storm
199269 9.8 CRITICAL
Network 		conquest_dicom_server_project conquest_dicom_server CONQUEST DICOM SERVER before 1.5.0 has a code execution vulnerability which can be exploited by attackers to execute malicious code. NVD-CWE-noinfo
CVE-2020-35308 2024-11-21 14:27 2021-04-1 Show GitHub Exploit DB Packet Storm
199270 5.3 MEDIUM
Network 		redhat 389_directory_server
enterprise_linux
directory_server 		When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an unauthenticated attacker to check the existence of a… CWE-203
 Information Exposure Through Discrepancy 		CVE-2020-35518 2024-11-21 14:27 2021-03-27 Show GitHub Exploit DB Packet Storm