Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250341 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の image-parsing ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2436 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
250342 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2435 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
250343 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2434 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
250344 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2433 2011-10-18 16:26 2011-09-13 Show GitHub Exploit DB Packet Storm
250345 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の U3D TIFF リソースにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2432 2011-10-18 16:25 2011-09-13 Show GitHub Exploit DB Packet Storm
250346 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2431 2011-10-18 16:25 2011-09-13 Show GitHub Exploit DB Packet Storm
250347 6.9 警告 アドビシステムズ - Adobe Reader における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-1353 2011-10-18 16:23 2011-09-13 Show GitHub Exploit DB Packet Storm
250348 5.8 警告 Adam Kennedy - Perl モジュール Crypt::DSA における署名を偽装される脆弱性 CWE-310
暗号の問題
CVE-2011-3599 2011-10-14 15:50 2011-10-10 Show GitHub Exploit DB Packet Storm
250349 5 警告 株式会社ロックオン - EC-CUBE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3988 2011-10-14 14:01 2011-10-14 Show GitHub Exploit DB Packet Storm
250350 6.8 警告 小山浩之 - DBD::mysqlPP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3989 2011-10-14 12:02 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199191 9.6 CRITICAL
Network
acquia mautic A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads. CWE-79
Cross-site Scripting
CVE-2020-35124 2024-11-21 14:26 2021-01-28 Show GitHub Exploit DB Packet Storm
199192 9.0 CRITICAL
Network
acquia mautic Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an … CWE-79
Cross-site Scripting
CVE-2020-35128 2024-11-21 14:26 2021-01-19 Show GitHub Exploit DB Packet Storm
199193 9.0 CRITICAL
Network
mautic mautic Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could… CWE-79
Cross-site Scripting
CVE-2020-35129 2024-11-21 14:26 2021-01-19 Show GitHub Exploit DB Packet Storm
199194 6.1 MEDIUM
Network
quest policy_authority_for_unified_communications Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the cConn.jsp file via t… CWE-79
Cross-site Scripting
CVE-2020-35206 2024-11-21 14:26 2021-01-11 Show GitHub Exploit DB Packet Storm
199195 9.8 CRITICAL
Network
quest policy_authority_for_unified_communications Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp fil… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-35205 2024-11-21 14:26 2021-01-11 Show GitHub Exploit DB Packet Storm
199196 6.1 MEDIUM
Network
quest policy_authority_for_unified_communications Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file … CWE-79
Cross-site Scripting
CVE-2020-35204 2024-11-21 14:26 2021-01-11 Show GitHub Exploit DB Packet Storm
199197 6.1 MEDIUM
Network
quest policy_authority_for_unified_communications Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file vi… CWE-79
Cross-site Scripting
CVE-2020-35203 2024-11-21 14:26 2021-01-11 Show GitHub Exploit DB Packet Storm
199198 9.8 CRITICAL
Network
agentejo cockpit Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON da… CWE-94
Code Injection
CVE-2020-35131 2024-11-21 14:26 2021-01-9 Show GitHub Exploit DB Packet Storm
199199 8.8 HIGH
Network
mozilla firefox Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl… CWE-787
 Out-of-bounds Write
CVE-2020-35114 2024-11-21 14:26 2021-01-7 Show GitHub Exploit DB Packet Storm
199200 8.8 HIGH
Network
mozilla firefox_esr
thunderbird
firefox
Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these… CWE-787
 Out-of-bounds Write
CVE-2020-35113 2024-11-21 14:26 2021-01-7 Show GitHub Exploit DB Packet Storm