Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252331 4.3 警告 アドビシステムズ - Adobe ColdFusion の RDS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4368 2011-12-15 16:57 2011-12-13 Show GitHub Exploit DB Packet Storm
252332 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-2463 2011-12-15 16:57 2011-12-13 Show GitHub Exploit DB Packet Storm
252333 4.3 警告 アップル - iOS 上の Safari におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
- 2011-12-15 12:02 2011-12-15 Show GitHub Exploit DB Packet Storm
252334 7.2 危険 TADASoft - Tadasoft Restorepoint の評価版における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4202 2011-12-14 15:50 2011-12-13 Show GitHub Exploit DB Packet Storm
252335 9.3 危険 TADASoft - Tadasoft Restorepoint の評価版における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-4201 2011-12-14 15:50 2011-12-13 Show GitHub Exploit DB Packet Storm
252336 7.5 危険 Brandon Long - Clearsilver の p_cgi_error 関数におけるサービス運用妨害 (クラッシュ) の脆弱性 CWE-134
書式文字列の問題
CVE-2011-4357 2011-12-13 15:11 2011-11-28 Show GitHub Exploit DB Packet Storm
252337 4.6 警告 freedesktop.org - colord の cd-mapping-db.c および cd-device-db.c における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4349 2011-12-13 15:10 2011-12-10 Show GitHub Exploit DB Packet Storm
252338 3.5 注意 レッドハット - Red Hat Network (RHN) Satellite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4346 2011-12-13 15:07 2011-12-7 Show GitHub Exploit DB Packet Storm
252339 10 危険 Google
サムスン
日本エイサー
- Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2011-4719 2011-12-13 15:06 2011-12-8 Show GitHub Exploit DB Packet Storm
252340 5 警告 Dream Property GmbH - DreamBox DM800 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2011-4716 2011-12-13 15:06 2011-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202031 4.3 MEDIUM
Network
apple itunes
iphone_os
tvos
safari
ipad_os
icloud
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Wind… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2020-3885 2024-11-21 14:31 2020-04-2 Show GitHub Exploit DB Packet Storm
202032 6.1 MEDIUM
Network
apple mac_os_x An injection issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to cause arbitrary javascript code execution. CWE-20
CWE-74
 Improper Input Validation 
Injection
CVE-2020-3884 2024-11-21 14:31 2020-04-2 Show GitHub Exploit DB Packet Storm
202033 8.8 HIGH
Network
apple iphone_os
tvos
watchos
ipad_os
mac_os_x
This issue was addressed with improved checks. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. An application may be able to use arbitrary entitlement… NVD-CWE-noinfo
CVE-2020-3883 2024-11-21 14:31 2020-04-2 Show GitHub Exploit DB Packet Storm
202034 5.5 MEDIUM
Local
apple mac_os_x A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to view sensitive user information. NVD-CWE-noinfo
CVE-2020-3881 2024-11-21 14:31 2020-04-2 Show GitHub Exploit DB Packet Storm
202035 9.8 CRITICAL
Network
unisoon ultralog_express_firmware UltraLog Express device management interface does not properly filter user inputted string in some specific parameters, attackers can inject arbitrary SQL command. CWE-89
SQL Injection
CVE-2020-3936 2024-11-21 14:31 2020-03-27 Show GitHub Exploit DB Packet Storm
202036 7.5 HIGH
Network
unisoon ultralog_express_firmware UltraLog Express device management software stores user’s information in cleartext. Any user can obtain accounts information through a specific page. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2020-3921 2024-11-21 14:31 2020-03-27 Show GitHub Exploit DB Packet Storm
202037 8.1 HIGH
Network
unisoon ultralog_express_firmware UltraLog Express device management interface does not properly perform access authentication in some specific pages/functions. Any user can access the privileged page to manage accounts through speci… CWE-306
Missing Authentication for Critical Function
CVE-2020-3920 2024-11-21 14:31 2020-03-27 Show GitHub Exploit DB Packet Storm
202038 4.3 MEDIUM
Network
adobe photoshop_2020
photoshop_cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosur… CWE-125
Out-of-bounds Read
CVE-2020-3791 2024-11-21 14:31 2020-03-26 Show GitHub Exploit DB Packet Storm
202039 8.8 HIGH
Network
adobe photoshop_2020
photoshop_cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code executio… CWE-787
 Out-of-bounds Write
CVE-2020-3790 2024-11-21 14:31 2020-03-26 Show GitHub Exploit DB Packet Storm
202040 9.8 CRITICAL
Network
adobe photoshop_2020
photoshop_cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code executio… CWE-787
 Out-of-bounds Write
CVE-2020-3789 2024-11-21 14:31 2020-03-26 Show GitHub Exploit DB Packet Storm