Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251101 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0978 2011-05-2 14:16 2011-02-10 Show GitHub Exploit DB Packet Storm
251102 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0097 2011-05-2 14:14 2011-04-12 Show GitHub Exploit DB Packet Storm
251103 9.3 危険 マイクロソフト - Microsoft Windows の OpenType Compact Font Format ドライバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0034 2011-05-2 14:14 2011-04-12 Show GitHub Exploit DB Packet Storm
251104 9.3 危険 マイクロソフト - Microsoft の JScript および VBScript スクリプトエンジンにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0663 2011-05-2 14:13 2011-04-12 Show GitHub Exploit DB Packet Storm
251105 7.5 危険 マイクロソフト - Microsoft Windows の DNS クライアント内にある DNSAPI.dll における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0657 2011-05-2 14:12 2011-04-12 Show GitHub Exploit DB Packet Storm
251106 9.3 危険 マイクロソフト - Microsoft Windows および Office XP の GDI+ 内にある gdiplus.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-0041 2011-05-2 14:11 2011-04-12 Show GitHub Exploit DB Packet Storm
251107 9.3 危険 マイクロソフト - Microsoft .NET Framework の x86 JIT コンパイラにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3958 2011-05-2 14:09 2011-04-12 Show GitHub Exploit DB Packet Storm
251108 9.3 危険 マイクロソフト - Microsoft Windows XP の Windows Messenger ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2011-1243 2011-05-2 14:08 2011-04-12 Show GitHub Exploit DB Packet Storm
251109 10 危険 マイクロソフト - Microsoft Windows の SMB サーバサービスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0661 2011-05-2 14:06 2011-04-12 Show GitHub Exploit DB Packet Storm
251110 9.3 危険 マイクロソフト - 複数の Microsoft 製品の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-0660 2011-05-2 14:05 2011-04-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199381 7.5 HIGH
Network 		sick package_analytics SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by… CWE-276
Incorrect Default Permissions  		CVE-2020-2077 2024-11-21 14:24 2020-07-29 Show GitHub Exploit DB Packet Storm
199382 9.8 CRITICAL
Network 		sick package_analytics SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, b… CWE-306
Missing Authentication for Critical Function 		CVE-2020-2076 2024-11-21 14:24 2020-07-29 Show GitHub Exploit DB Packet Storm
199383 5.4 MEDIUM
Network 		jenkins jenkins Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2221 2024-11-21 14:24 2020-07-16 Show GitHub Exploit DB Packet Storm
199384 5.4 MEDIUM
Network 		jenkins jenkins Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2220 2024-11-21 14:24 2020-07-16 Show GitHub Exploit DB Packet Storm
199385 8.1 HIGH
Network 		paloaltonetworks pan-os An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires s… CWE-78
OS Command  		CVE-2020-2034 2024-11-21 14:24 2020-07-9 Show GitHub Exploit DB Packet Storm
199386 4.9 MEDIUM
Network 		paloaltonetworks pan-os An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the… CWE-191
 Integer Underflow (Wrap or Wraparound) 		CVE-2020-2031 2024-11-21 14:24 2020-07-9 Show GitHub Exploit DB Packet Storm
199387 7.2 HIGH
Network 		paloaltonetworks pan-os An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 … CWE-78
OS Command  		CVE-2020-2030 2024-11-21 14:24 2020-07-9 Show GitHub Exploit DB Packet Storm
199388 5.4 MEDIUM
Network 		jenkins link_column Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting 		CVE-2020-2219 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm
199389 3.3 LOW
Local 		hp_application_lifecycle_management_quality_center_project hp_application_lifecycle_management_quality_center Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master fil… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-2218 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm
199390 6.1 MEDIUM
Network 		praqma compatibility_action_storage Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scr… CWE-79
Cross-site Scripting 		CVE-2020-2217 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm