Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250511 5 警告 Parallels - Parallels Plesk Panel の billing system におけるスプーフィング攻撃の脆弱性 CWE-310
暗号の問題
CVE-2011-4746 2011-12-20 11:23 2011-12-16 Show GitHub Exploit DB Packet Storm
250512 4.3 警告 Parallels - Parallels Plesk Panel の billing system におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4745 2011-12-20 11:17 2011-12-16 Show GitHub Exploit DB Packet Storm
250513 10 危険 Parallels - Parallels Plesk Panel の Control Panel における詳細不明な脆弱性 CWE-DesignError
CVE-2011-4744 2011-12-20 11:16 2011-12-16 Show GitHub Exploit DB Packet Storm
250514 10 危険 Parallels - Parallels Plesk Panel の Control Panel における詳細不明な脆弱性 CWE-DesignError
CVE-2011-4743 2011-12-20 11:16 2011-12-16 Show GitHub Exploit DB Packet Storm
250515 5 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4742 2011-12-20 11:15 2011-12-16 Show GitHub Exploit DB Packet Storm
250516 5 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4741 2011-12-20 11:09 2011-12-16 Show GitHub Exploit DB Packet Storm
250517 4.3 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4740 2011-12-20 10:57 2011-12-16 Show GitHub Exploit DB Packet Storm
250518 10 危険 Parallels - Parallels Plesk Panel の Control Panel における認証を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2011-4739 2011-12-20 10:56 2011-12-16 Show GitHub Exploit DB Packet Storm
250519 5 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4738 2011-12-20 10:55 2011-12-16 Show GitHub Exploit DB Packet Storm
250520 5 警告 Parallels - Parallels Plesk Panel の Control Panel における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-4737 2011-12-20 10:30 2011-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200361 7.8 HIGH
Local
pearson vue_testing_system The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-36154 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
200362 9.8 CRITICAL
Network
cse_bookstore_project cse_bookstore CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of th… CWE-89
SQL Injection
CVE-2020-36112 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
200363 7.5 HIGH
Network
ffmpeg
debian
ffmpeg
debian_linux
decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. CWE-787
 Out-of-bounds Write
CVE-2020-35965 2024-11-21 14:28 2021-01-4 Show GitHub Exploit DB Packet Storm
200364 6.5 MEDIUM
Network
ffmpeg ffmpeg track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. CWE-787
 Out-of-bounds Write
CVE-2020-35964 2024-11-21 14:28 2021-01-4 Show GitHub Exploit DB Packet Storm
200365 7.8 HIGH
Local
treasuredata fluent_bit flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion. CWE-787
 Out-of-bounds Write
CVE-2020-35963 2024-11-21 14:28 2021-01-4 Show GitHub Exploit DB Packet Storm
200366 7.5 HIGH
Network
loopring loopring The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation. NVD-CWE-noinfo
CVE-2020-35962 2024-11-21 14:28 2021-01-3 Show GitHub Exploit DB Packet Storm
200367 6.5 MEDIUM
Network
php-fusion php-fusion login.php in PHPFusion (aka PHP-Fusion) Andromeda 9.x before 2020-12-30 generates error messages that distinguish between incorrect username and incorrect password (i.e., not a single "Incorrect user… NVD-CWE-noinfo
CVE-2020-35952 2024-11-21 14:28 2021-01-3 Show GitHub Exploit DB Packet Storm
200368 9.9 CRITICAL
Network
expresstech quiz_and_survey_master An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offl… CWE-306
Missing Authentication for Critical Function
CVE-2020-35951 2024-11-21 14:28 2021-01-1 Show GitHub Exploit DB Packet Storm
200369 8.8 HIGH
Network
xcloner xcloner An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF (via almost any endpoint). CWE-352
 Origin Validation Error
CVE-2020-35950 2024-11-21 14:28 2021-01-1 Show GitHub Exploit DB Packet Storm
200370 9.8 CRITICAL
Network
expresstech quiz_and_survey_master An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It made it possible for unauthenticated attackers to upload arbitrary files and achieve remote code execution.… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-35949 2024-11-21 14:28 2021-01-1 Show GitHub Exploit DB Packet Storm