Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254211 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の image-parsing ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2436 2011-10-18 16:28 2011-09-13 Show GitHub Exploit DB Packet Storm
254212 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2435 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
254213 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2434 2011-10-18 16:27 2011-09-13 Show GitHub Exploit DB Packet Storm
254214 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2433 2011-10-18 16:26 2011-09-13 Show GitHub Exploit DB Packet Storm
254215 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat の U3D TIFF リソースにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-2432 2011-10-18 16:25 2011-09-13 Show GitHub Exploit DB Packet Storm
254216 9.3 危険 アドビシステムズ - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-2431 2011-10-18 16:25 2011-09-13 Show GitHub Exploit DB Packet Storm
254217 6.9 警告 アドビシステムズ - Adobe Reader における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-1353 2011-10-18 16:23 2011-09-13 Show GitHub Exploit DB Packet Storm
254218 5.8 警告 Adam Kennedy - Perl モジュール Crypt::DSA における署名を偽装される脆弱性 CWE-310
暗号の問題
CVE-2011-3599 2011-10-14 15:50 2011-10-10 Show GitHub Exploit DB Packet Storm
254219 5 警告 株式会社ロックオン - EC-CUBE における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3988 2011-10-14 14:01 2011-10-14 Show GitHub Exploit DB Packet Storm
254220 6.8 警告 小山浩之 - DBD::mysqlPP における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-3989 2011-10-14 12:02 2011-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208091 9.8 CRITICAL
Network
sick package_analytics SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, b… CWE-306
Missing Authentication for Critical Function
CVE-2020-2076 2024-11-21 14:24 2020-07-29 Show GitHub Exploit DB Packet Storm
208092 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the upstream job's display name shown as part of a build cause, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting
CVE-2020-2221 2024-11-21 14:24 2020-07-16 Show GitHub Exploit DB Packet Storm
208093 5.4 MEDIUM
Network
jenkins jenkins Jenkins 2.244 and earlier, LTS 2.235.1 and earlier does not escape the agent name in the build time trend page, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting
CVE-2020-2220 2024-11-21 14:24 2020-07-16 Show GitHub Exploit DB Packet Storm
208094 8.1 HIGH
Network
paloaltonetworks pan-os An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires s… CWE-78
OS Command 
CVE-2020-2034 2024-11-21 14:24 2020-07-9 Show GitHub Exploit DB Packet Storm
208095 4.9 MEDIUM
Network
paloaltonetworks pan-os An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the… CWE-191
 Integer Underflow (Wrap or Wraparound)
CVE-2020-2031 2024-11-21 14:24 2020-07-9 Show GitHub Exploit DB Packet Storm
208096 7.2 HIGH
Network
paloaltonetworks pan-os An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 … CWE-78
OS Command 
CVE-2020-2030 2024-11-21 14:24 2020-07-9 Show GitHub Exploit DB Packet Storm
208097 5.4 MEDIUM
Network
jenkins link_column Jenkins Link Column Plugin 1.0 and earlier does not filter URLs of links created by users with View/Configure permission, resulting in a stored cross-site scripting vulnerability. CWE-79
Cross-site Scripting
CVE-2020-2219 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm
208098 3.3 LOW
Local
hp_application_lifecycle_management_quality_center_project hp_application_lifecycle_management_quality_center Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master fil… CWE-522
 Insufficiently Protected Credentials
CVE-2020-2218 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm
208099 6.1 MEDIUM
Network
praqma compatibility_action_storage Jenkins Compatibility Action Storage Plugin 1.0 and earlier does not escape the content coming from the MongoDB in the testConnection form validation endpoint, resulting in a reflected cross-site scr… CWE-79
Cross-site Scripting
CVE-2020-2217 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm
208100 4.3 MEDIUM
Network
jenkins zephyr_for_jira_test_management A missing permission check in Jenkins Zephyr for JIRA Test Management Plugin 1.5 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP server using attack… CWE-862
 Missing Authorization
CVE-2020-2216 2024-11-21 14:24 2020-07-3 Show GitHub Exploit DB Packet Storm