Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253631 10 危険 ヒューレット・パッカード - HP Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-3158 2011-10-25 16:42 2011-10-18 Show GitHub Exploit DB Packet Storm
253632 10 危険 ヒューレット・パッカード - HP Data Protector における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-3157 2011-10-25 16:41 2011-10-18 Show GitHub Exploit DB Packet Storm
253633 4.4 警告 アップル - Apple Mac OS X の Application Firewall のデバッグログ機能における権限を取得される脆弱性 CWE-134
書式文字列の問題
CVE-2011-0185 2011-10-25 16:40 2011-10-14 Show GitHub Exploit DB Packet Storm
253634 5 警告 アップル - Apple iOS および Apple TV のカーネルにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3259 2011-10-25 16:38 2011-10-14 Show GitHub Exploit DB Packet Storm
253635 5 警告 アップル - Apple iOS および Mac OS X の CFNetwork における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3246 2011-10-25 16:37 2011-10-14 Show GitHub Exploit DB Packet Storm
253636 5 警告 アップル - Mac OS X 上で稼動する Apple Safari のプライベートブラウズ機能におけるユーザを追跡可能な脆弱性 CWE-200
情報漏えい
CVE-2011-3242 2011-10-25 16:36 2011-10-14 Show GitHub Exploit DB Packet Storm
253637 6.8 警告 アップル - Mac OS X 上で動作する Apple Safari の SSL 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2011-3231 2011-10-25 16:36 2011-10-14 Show GitHub Exploit DB Packet Storm
253638 6.8 警告 アップル - Mac OS X 上で動作する Apple Safari における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-3230 2011-10-25 16:35 2011-10-14 Show GitHub Exploit DB Packet Storm
253639 6.8 警告 アップル - Apple Safari におけるディレクトリトラバーサルの脆弱性 CWE-22
CWE-94
CVE-2011-3229 2011-10-25 16:34 2011-10-14 Show GitHub Exploit DB Packet Storm
253640 6.8 警告 アップル - Apple Mac OS X の Apple Type Services (ATS) における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2011-3437 2011-10-25 16:33 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215811 6.1 MEDIUM
Network
bitcoin-abe_project bitcoin-abe Abe (aka bitcoin-abe) through 0.7.2, and 0.8pre, allows XSS in __call__ in abe.py because the PATH_INFO environment variable is mishandled during a PageNotFound exception. CWE-79
Cross-site Scripting
CVE-2020-11944 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215812 7.5 HIGH
Network
zohocorp manageengine_opmanager Zoho ManageEngine OpManager before 125120 allows an unauthenticated user to retrieve an API key via a servlet call. CWE-306
Missing Authentication for Critical Function
CVE-2020-11946 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215813 8.8 HIGH
Network
sonatype nexus_repository_manager_3 An issue was discovered in Sonatype Nexus Repository Manager in versions 3.21.1 and 3.22.0. It is possible for a user with appropriate privileges to create, modify, and execute scripting tasks withou… CWE-863
 Incorrect Authorization
CVE-2020-11753 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215814 6.1 MEDIUM
Network
python-markdown2_project python-markdown2 python-markdown2 through 2.3.8 allows XSS because element names are mishandled unless a \w+ match succeeds. For example, an attack might use elementname@ or elementname- with an onclick attribute. CWE-79
Cross-site Scripting
CVE-2020-11888 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
215815 6.1 MEDIUM
Network
gtranslate translate_wordpress_with_gtranslate The GTranslate plugin before 2.8.52 for WordPress has Reflected XSS via a crafted link. This requires use of the hreflang tags feature within a sub-domain or sub-directory paid option. CWE-79
Cross-site Scripting
CVE-2020-11930 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215816 9.8 CRITICAL
Network
davidlingren media_library_assistant In the media-library-assistant plugin before 2.82 for WordPress, Remote Code Execution can occur via the tax_query, meta_query, or date_query parameter in mla_gallery via an admin. NVD-CWE-noinfo
CVE-2020-11928 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215817 9.1 CRITICAL
Network
libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (2 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read
CVE-2020-11895 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215818 9.1 CRITICAL
Network
libming libming Ming (aka libming) 0.4.8 has a heap-based buffer over-read (8 bytes) in the function decompileIF() in decompile.c. CWE-125
Out-of-bounds Read
CVE-2020-11894 2024-11-21 13:58 2020-04-20 Show GitHub Exploit DB Packet Storm
215819 6.1 MEDIUM
Network
svg2png_project svg2png svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document. CWE-79
Cross-site Scripting
CVE-2020-11887 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm
215820 8.1 HIGH
Network
opennms horizon
meridian
OpenNMS Horizon and Meridian allows HQL Injection in element/nodeList.htm (aka the NodeListController) via snmpParm or snmpParmValue to addCriteriaForSnmpParm. This affects Horizon before 25.2.1, Mer… CWE-89
SQL Injection
CVE-2020-11886 2024-11-21 13:58 2020-04-18 Show GitHub Exploit DB Packet Storm