Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250901	5	警告	日立	-	JP1/NETM/DM におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2011-03-1 15:26	2011-01-31	Show	GitHub Exploit DB Packet Storm

250902	7.5	危険	IBM	-	IBM DB2 の DB2 Administration Server コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0731	2011-03-1 15:17	2011-01-28	Show	GitHub Exploit DB Packet Storm

250903	7.8	危険	ISC, Inc. レッドハット	-	ISC DHCPv6 にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-0413	2011-03-1 15:10	2011-01-28	Show	GitHub Exploit DB Packet Storm

250904	7.5	危険	Google	-	Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性	CWE-189 数値処理の問題	CVE-2008-0986	2011-03-1 14:58	2008-03-6	Show	GitHub Exploit DB Packet Storm

250905	6.8	警告	Google	-	Google Android SDK の GIF ライブラリにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0985	2011-03-1 14:56	2008-03-6	Show	GitHub Exploit DB Packet Storm

250906	7.2	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	64-bit プラットフォーム上で稼働している Linux kernel の compat_alloc_user_space 関数における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3081	2011-03-1 14:46	2010-09-21	Show	GitHub Exploit DB Packet Storm

250907	4.6	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0291	2011-03-1 14:44	2010-02-15	Show	GitHub Exploit DB Packet Storm

250908	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の sctp_process_unk_param 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1173	2011-03-1 14:43	2010-05-7	Show	GitHub Exploit DB Packet Storm

250909	2.6	注意	サイバートラスト株式会社 VMware Linux レッドハット	-	RHEL の MMIO 命令デコーダにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0730	2011-03-1 14:42	2010-05-6	Show	GitHub Exploit DB Packet Storm

250910	4.9	警告	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の drivers/connector/connector.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0410	2011-03-1 14:41	2010-02-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198361	9.8	CRITICAL Network	coscale_agent_project	coscale_agent	Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent container may allow a remote attacker to ac…	CWE-306 Missing Authentication for Critical Function	CVE-2020-35462	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

198362	6.1	MEDIUM Network	onlineonly	phpjabbers_appointment_scheduler	Multiple cross-site scripting (XSS) vulnerabilities exist in PHPJabbers Appointment Scheduler 2.3, in the index.php admin login webpage (with different request parameters), allows remote attackers to…	CWE-79 Cross-site Scripting	CVE-2020-35416	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

198363	7.5	HIGH Network	jsonparser_project fedoraproject	jsonparser fedora	jsonparser 1.0.0 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a GET call.	NVD-CWE-noinfo	CVE-2020-35381	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

198364	7.5	HIGH Network	gjson_project	gjson	GJSON before 1.6.4 allows attackers to cause a denial of service via crafted JSON.	NVD-CWE-noinfo	CVE-2020-35380	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

198365	6.1	MEDIUM Network	egavilanmedia	barcodes_generator	EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website.	CWE-79 Cross-site Scripting	CVE-2020-35396	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

198366	6.1	MEDIUM Network	egavilanmedia	expense_management_system	XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field	CWE-79 Cross-site Scripting	CVE-2020-35395	2024-11-21 14:27	2020-12-16	Show	GitHub Exploit DB Packet Storm

198367	7.5	HIGH Network	envoyproxy	envoy	Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.	NVD-CWE-noinfo	CVE-2020-35471	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

198368	8.8	HIGH Adjacent	envoyproxy	envoy	Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-prox…	NVD-CWE-noinfo	CVE-2020-35470	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

198369	5.3	MEDIUM Network	mpxj oracle	mpxj primavera_unifier	common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.	CWE-22 Path Traversal	CVE-2020-35460	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

198370	7.8	HIGH Local	gnome	glib	GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor's position is "Realistically this is not a security issue.…	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2020-35457	2024-11-21 14:27	2020-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed