Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250561 5 警告 マイクロソフト - Microsoft Windows Server 2003 および 2008 の DNS サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2011-1970 2011-08-26 10:20 2011-08-9 Show GitHub Exploit DB Packet Storm
250562 10 危険 マイクロソフト - Microsoft Windows Server 2008 の DNS サーバにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1966 2011-08-26 10:18 2011-08-9 Show GitHub Exploit DB Packet Storm
250563 4.3 警告 マイクロソフト - Microsoft Internet Explorer における Cookie を読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2011-2383 2011-08-26 10:17 2011-08-9 Show GitHub Exploit DB Packet Storm
250564 9.3 危険 マイクロソフト - Microsoft Internet Explorer 7 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1963 2011-08-26 10:15 2011-08-9 Show GitHub Exploit DB Packet Storm
250565 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 9 におけるコンテンツを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-1962 2011-08-26 10:13 2011-08-9 Show GitHub Exploit DB Packet Storm
250566 4.3 警告 マイクロソフト - Microsoft .NET Framework における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-1978 2011-08-25 10:04 2011-08-9 Show GitHub Exploit DB Packet Storm
250567 4.7 警告 マイクロソフト - 複数の Microsoft Windows におけるサービス運用妨害 (リブート) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1971 2011-08-25 10:03 2011-08-9 Show GitHub Exploit DB Packet Storm
250568 4.3 警告 マイクロソフト - Microsoft Visual Studio および Report Viewer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-1976 2011-08-25 10:00 2011-08-9 Show GitHub Exploit DB Packet Storm
250569 4.3 警告 マイクロソフト - Microsoft .NET Framework における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-1977 2011-08-25 09:54 2011-08-9 Show GitHub Exploit DB Packet Storm
250570 7.1 危険 マイクロソフト - Microsoft Windows の RDP 実装におけるサービス運用妨害 (リブート) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-1968 2011-08-25 09:50 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198951 7.5 HIGH
Network 		arc-swap_project arc-swap An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of … NVD-CWE-noinfo
CVE-2020-35711 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
198952 5.3 MEDIUM
Network 		parallels remote_application_server Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the… CWE-200
Information Exposure 		CVE-2020-35710 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
198953 4.9 MEDIUM
Network 		bloofox bloofoxcms bloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application/octet-stream") to ../media/images/ via the admin/index.php?mode=tools&page=upload URI, aka directory t… CWE-22
Path Traversal 		CVE-2020-35709 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
198954 7.2 HIGH
Network 		phplist phplist phpList 3.5.9 allows SQL injection by admins who provide a crafted fourth line of a file to the "Config - Import Administrators" page. CWE-89
SQL Injection 		CVE-2020-35708 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
198955 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Company Name parameter to the New Client screen. CWE-79
Cross-site Scripting 		CVE-2020-35707 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
198956 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Project screen. CWE-79
Cross-site Scripting 		CVE-2020-35706 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
198957 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Name parameter to the New User screen. CWE-79
Cross-site Scripting 		CVE-2020-35705 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
198958 5.4 MEDIUM
Network 		daybydaycrm daybyday Daybyday 2.1.0 allows stored XSS via the Title parameter to the New Lead screen. CWE-79
Cross-site Scripting 		CVE-2020-35704 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
198959 7.8 HIGH
Local 		freedesktop poppler DCTStream::getChars in DCTStream.cc in Poppler 20.12.1 has a heap-based buffer overflow via a crafted PDF document. NOTE: later reports indicate that this only affects builds from Poppler git clones … CWE-787
 Out-of-bounds Write 		CVE-2020-35702 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm
198960 8.8 HIGH
Adjacent 		google android On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bluetooth Low Energy (BLE) device to pair silently with a vulnerable target device, without… NVD-CWE-noinfo
CVE-2020-35693 2024-11-21 14:27 2020-12-25 Show GitHub Exploit DB Packet Storm