Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251031	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-1993	2011-10-21 15:34	2011-10-11	Show	GitHub Exploit DB Packet Storm

251032	7.2	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 の afd.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2005	2011-10-21 15:34	2011-10-11	Show	GitHub Exploit DB Packet Storm

251033	5	警告	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2011-2012	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

251034	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG の MicrosoftClient.jar における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-1969	2011-10-21 15:31	2011-10-11	Show	GitHub Exploit DB Packet Storm

251035	4.3	警告	マイクロソフト	-	Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1897	2011-10-21 15:30	2011-10-11	Show	GitHub Exploit DB Packet Storm

251036	4.3	警告	マイクロソフト	-	Microsoft Forefront UAG 2010 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1896	2011-10-21 15:30	2011-10-11	Show	GitHub Exploit DB Packet Storm

251037	9.3	危険	マイクロソフト	-	Microsoft Forefront UAG 2010 における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-1895	2011-10-21 15:28	2011-10-11	Show	GitHub Exploit DB Packet Storm

251038	9.3	危険	マイクロソフト	-	Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1253	2011-10-21 15:27	2011-10-11	Show	GitHub Exploit DB Packet Storm

251039	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内にある win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2011	2011-10-21 15:26	2011-10-11	Show	GitHub Exploit DB Packet Storm

251040	9.3	危険	マイクロソフト	-	Microsoft Windows の win32k.sys のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2003	2011-10-21 15:25	2011-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200621	6.5	MEDIUM Network	cxuu	cxuucms	CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add.	CWE-352 Origin Validation Error	CVE-2020-35347	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200622	4.8	MEDIUM Network	cxuu	cxuucms	CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add.	CWE-79 Cross-site Scripting	CVE-2020-35346	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200623	7.5	HIGH Network	rockoa	xinhu	rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true.	NVD-CWE-noinfo	CVE-2020-35388	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200624	9.8	CRITICAL Network	tp-link	wa901nd_firmware archer_c5_firmware archer_c7_firmware mr3420_firmware mr6400_firmware wa701nd_firmware wa801nd_firmware wdr3500_firmware wdr3600_firmware we843n_firmware	A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201…	NVD-CWE-noinfo	CVE-2020-35575	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200625	7.5	HIGH Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service (segmentation fault) via a long /goform/langSwitch langSelectionOnly parameter.	NVD-CWE-noinfo	CVE-2020-35716	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200626	8.8	HIGH Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the upload_settings.cgi page.	CWE-78 OS Command	CVE-2020-35715	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200627	8.8	HIGH Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program.	CWE-78 OS Command	CVE-2020-35714	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200628	9.8	CRITICAL Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page.	CWE-78 OS Command	CVE-2020-35713	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200629	9.8	CRITICAL Network	esri	arcgis_server	Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35712	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

200630	7.5	HIGH Network	arc-swap_project	arc-swap	An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of …	NVD-CWE-noinfo	CVE-2020-35711	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed