Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251081	9.3	危険	アップル Google レッドハット	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1780	2011-02-4 14:28	2010-07-30	Show	GitHub Exploit DB Packet Storm

251082	5.8	警告	アップルレッドハット	-	Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3813	2011-02-4 14:26	2010-11-22	Show	GitHub Exploit DB Packet Storm

251083	9.3	危険	アップルレッドハット	-	Apple Safari の WebKit における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3812	2011-02-4 14:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

251084	7.5	危険	Objectivity	-	Objectivity/DB 管理用ツールに認証不備の問題	CWE-287 不適切な認証	CVE-2011-0489	2011-02-4 14:16	2011-01-14	Show	GitHub Exploit DB Packet Storm

251085	6.8	警告	ICQ	-	ICQ 7のアップデートに検証不備の問題	CWE-94 コード・インジェクション	CVE-2011-0487	2011-02-4 14:14	2011-01-14	Show	GitHub Exploit DB Packet Storm

251086	-	-	Google	-	Google Chrome における複数の脆弱性	-	-	2011-02-4 14:11	2011-01-14	Show	GitHub Exploit DB Packet Storm

251087	5	警告	Wireshark	-	Wireshark の ASN.1 BER 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-0445	2011-02-4 14:09	2011-01-11	Show	GitHub Exploit DB Packet Storm

251088	6.9	警告	サイバートラスト株式会社 Python Software Foundation レッドハット	-	Python の PySys_SetArgv API 関数における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2008-5983	2011-02-4 13:58	2009-04-14	Show	GitHub Exploit DB Packet Storm

251089	2.6	注意	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2322	2011-02-3 14:55	2010-06-18	Show	GitHub Exploit DB Packet Storm

251090	5.8	警告	サイバートラスト株式会社 FastJar レッドハット	-	FastJar の jartool.c 内にある extract_jar 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0831	2011-02-3 14:52	2010-06-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199121	8.8	HIGH Network	macally	wifisd2-2a82_firmware	In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator acco…	CWE-287 Improper Authentication	CVE-2020-29669	2024-11-21 14:24	2020-12-14	Show	GitHub Exploit DB Packet Storm

199122	7.8	HIGH Local	westerndigital	dashboard	Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account.	CWE-427 Uncontrolled Search Path Element	CVE-2020-29654	2024-11-21 14:24	2020-12-12	Show	GitHub Exploit DB Packet Storm

199123	9.8	CRITICAL Network	westerndigital	my_cloud_os_5	An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device.	CWE-287 Improper Authentication	CVE-2020-29563	2024-11-21 14:24	2020-12-12	Show	GitHub Exploit DB Packet Storm

199124	6.1	MEDIUM Network	smartystreets	liveaddressplugin.js	A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via…	CWE-79 Cross-site Scripting	CVE-2020-29455	2024-11-21 14:24	2020-12-12	Show	GitHub Exploit DB Packet Storm

199125	9.8	CRITICAL Network	sophos	cyberoamos	An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely.	CWE-89 SQL Injection	CVE-2020-29574	2024-11-21 14:24	2020-12-12	Show	GitHub Exploit DB Packet Storm

199126	9.8	CRITICAL Network	docker	registry	Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacke…	CWE-521 Weak Password Requirements	CVE-2020-29591	2024-11-21 14:24	2020-12-12	Show	GitHub Exploit DB Packet Storm

199127	9.8	CRITICAL Network	lanatmservice	m3_atm_monitoring_system	In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient S…	CWE-613 Insufficient Session Expiration	CVE-2020-29667	2024-11-21 14:24	2020-12-10	Show	GitHub Exploit DB Packet Storm

199128	5.3	MEDIUM Network	lanatmservice	m3_atm_monitoring_system	In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and …	NVD-CWE-Other	CVE-2020-29666	2024-11-21 14:24	2020-12-10	Show	GitHub Exploit DB Packet Storm

199129	3.7	LOW Network	sympa fedoraproject debian	sympa fedora debian_linux	Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun.	CWE-287 CWE-565 Improper Authentication Reliance on Cookies without Validation and Integrity Checking	CVE-2020-29668	2024-11-21 14:24	2020-12-10	Show	GitHub Exploit DB Packet Storm

199130	7.8	HIGH Local	paloaltonetworks	cortex_xdr_agent	A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privil…	CWE-427 Uncontrolled Search Path Element	CVE-2020-2049	2024-11-21 14:24	2020-12-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed