Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250041 1.7 注意 IBM - IBM WebSphere MQ における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0905 2011-11-7 15:17 2011-10-30 Show GitHub Exploit DB Packet Storm
250042 4.1 警告 IBM - IBM WebSphere MQ におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0900 2011-11-7 15:17 2011-10-30 Show GitHub Exploit DB Packet Storm
250043 9.3 危険 IBM - IBM Rational AppScan Standard および Express における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-1367 2011-11-7 15:16 2011-10-30 Show GitHub Exploit DB Packet Storm
250044 8.8 危険 IBM - IBM Rational AppScan Enterprise および AppScan Reporting Console における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2011-1366 2011-11-7 15:15 2011-10-30 Show GitHub Exploit DB Packet Storm
250045 4.3 警告 IBM - IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2748 2011-11-7 15:14 2009-10-24 Show GitHub Exploit DB Packet Storm
250046 7.2 危険 Google - Google App Engine Python SDK の sandbox 環境におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4213 2011-11-7 09:51 2011-10-30 Show GitHub Exploit DB Packet Storm
250047 7.2 危険 Google - Google App Engine Python SDK の sandbox 環境におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4212 2011-11-7 09:50 2011-10-30 Show GitHub Exploit DB Packet Storm
250048 7.2 危険 Google - Google App Engine Python SDK の sandbox 環境におけるアクセス制限を回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-4211 2011-11-7 09:49 2011-10-30 Show GitHub Exploit DB Packet Storm
250049 6.8 警告 Google - Google App Engine Python SDK の SDK Console におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-1364 2011-11-7 09:48 2011-10-30 Show GitHub Exploit DB Packet Storm
250050 5 警告 IBM - IBM WebSphere Application Server (WAS) における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2747 2011-11-7 09:46 2009-10-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199091 7.5 HIGH
Network 		google flatbuffers An issue was discovered in the flatbuffers crate through 2020-04-11 for Rust. read_scalar (and read_scalar_at) can transmute values without unsafe blocks. NVD-CWE-noinfo
CVE-2020-35864 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199092 9.8 CRITICAL
Network 		hyper hyper An issue was discovered in the hyper crate before 0.12.34 for Rust. HTTP request smuggling can occur. Remote code execution can occur in certain situations with an HTTP server on the loopback interfa… CWE-444
HTTP Request Smuggling 		CVE-2020-35863 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199093 9.8 CRITICAL
Network 		bitvec_project bitvec An issue was discovered in the bitvec crate before 0.17.4 for Rust. BitVec to BitBox conversion leads to a use-after-free or double free. CWE-415
CWE-416
 Double Free
 Use After Free 		CVE-2020-35862 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199094 7.5 HIGH
Network 		bumpalo_project bumpalo An issue was discovered in the bumpalo crate before 3.2.1 for Rust. The realloc feature allows the reading of unknown memory. Attackers can potentially read cryptographic keys. CWE-125
Out-of-bounds Read 		CVE-2020-35861 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199095 9.8 CRITICAL
Network 		cbox_project cbox An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code. CWE-476
 NULL Pointer Dereference 		CVE-2020-35860 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199096 9.1 CRITICAL
Network 		lucet-runtime-internals_project lucet-runtime-internals An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs ca… CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write 		CVE-2020-35859 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199097 9.8 CRITICAL
Network 		prost_project prost An issue was discovered in the prost crate before 0.6.1 for Rust. There is stack consumption via a crafted message, causing a denial of service (e.g., x86) or possibly remote code execution (e.g., AR… CWE-787
 Out-of-bounds Write 		CVE-2020-35858 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199098 7.5 HIGH
Network 		trust-dns-server_project trust-dns-server An issue was discovered in the trust-dns-server crate before 0.18.1 for Rust. DNS MX and SRV null targets are mishandled, causing stack consumption. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-35857 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199099 4.7 MEDIUM
Local 		concread_project concread An issue was discovered in the concread crate before 0.2.6 for Rust. Attackers can cause an ARCache<K,V> data race by sending types that do not implement Send/Sync. CWE-362
Race Condition 		CVE-2020-35928 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199100 5.5 MEDIUM
Local 		thex_project thex An issue was discovered in the thex crate through 2020-12-08 for Rust. Thex<T> allows cross-thread data races of non-Send types. NVD-CWE-noinfo
CVE-2020-35927 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm