Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250311	4.3	警告	マイクロソフト	-	複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1893	2011-10-20 16:20	2011-09-13	Show	GitHub Exploit DB Packet Storm

250312	9.3	危険	マイクロソフト	-	Microsoft Office 2003 および 2007 における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1980	2011-10-20 16:19	2011-09-13	Show	GitHub Exploit DB Packet Storm

250313	9.3	危険	マイクロソフト	-	Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1982	2011-10-20 16:19	2011-09-13	Show	GitHub Exploit DB Packet Storm

250314	7.2	危険	マイクロソフト	-	Windows Server 2003 および 2008 の WINS における権限昇格の脆弱性性	CWE-264 認可・権限・アクセス制御	CVE-2011-1984	2011-10-20 16:19	2011-09-13	Show	GitHub Exploit DB Packet Storm

250315	9.3	危険	マイクロソフト	-	Microsoft Excel 2003 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2011-1986	2011-10-20 16:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

250316	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1987	2011-10-20 16:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

250317	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1988	2011-10-20 16:18	2011-09-13	Show	GitHub Exploit DB Packet Storm

250318	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1989	2011-10-20 16:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

250319	9.3	危険	マイクロソフト	-	複数の Microsoft Excel 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1990	2011-10-20 16:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

250320	9.3	危険	マイクロソフト	-	Microsoft Windows における権限昇格の脆弱性	CWE-Other その他	CVE-2011-1991	2011-10-20 16:17	2011-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197881	5.5	MEDIUM Local	apple	mac_os_x	A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files.	NVD-CWE-noinfo	CVE-2020-3889	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197882	4.3	MEDIUM Network	apple	iphone_os ipad_os	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4. A maliciously crafted page may interfere with other web contexts.	NVD-CWE-noinfo	CVE-2020-3888	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197883	4.3	MEDIUM Network	apple	itunes iphone_os tvos safari ipad_os icloud	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Wind…	NVD-CWE-Other	CVE-2020-3887	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197884	4.3	MEDIUM Network	apple	itunes iphone_os tvos safari ipad_os icloud	A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Wind…	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2020-3885	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197885	6.1	MEDIUM Network	apple	mac_os_x	An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution.	CWE-20 CWE-74 Improper Input Validation Injection	CVE-2020-3884	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197886	8.8	HIGH Network	apple	iphone_os tvos watchos ipad_os mac_os_x	This issue was addressed with improved checks. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. An application may be able to use arbitrary entitlement…	NVD-CWE-noinfo	CVE-2020-3883	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197887	5.5	MEDIUM Local	apple	mac_os_x	A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to view sensitive user information.	NVD-CWE-noinfo	CVE-2020-3881	2024-11-21 14:31	2020-04-2	Show	GitHub Exploit DB Packet Storm

197888	9.8	CRITICAL Network	unisoon	ultralog_express_firmware	UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command.	CWE-89 SQL Injection	CVE-2020-3936	2024-11-21 14:31	2020-03-27	Show	GitHub Exploit DB Packet Storm

197889	7.5	HIGH Network	unisoon	ultralog_express_firmware	UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page.	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-3921	2024-11-21 14:31	2020-03-27	Show	GitHub Exploit DB Packet Storm

197890	8.1	HIGH Network	unisoon	ultralog_express_firmware	UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through speci…	CWE-306 Missing Authentication for Critical Function	CVE-2020-3920	2024-11-21 14:31	2020-03-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed