Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251281	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3276	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251282	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3275	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251283	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の Employee Search Engine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3274	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251284	5	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3273	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251285	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の security-questions 実装における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3272	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251286	6.8	警告	IBM	-	IBM WAS の Integrated Solutions Console におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3271	2012-03-27 18:42	2011-07-18	Show	GitHub Exploit DB Packet Storm

251287	6.8	警告	シスコシステムズ	-	Cisco WebEx Meeting Center T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3270	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

251288	9.3	危険	シスコシステムズ	-	Cisco WRF および ARF Player T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3269	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

251289	6.4	警告	orbeon	-	Orbeon Forms の XForms サービスの xforms-server コンポーネントにおけるイントラネットサーバへ HTTP リクエストを送信される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3260	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

251290	5	警告	シマンテックインテル	-	Symantec Antivirus Corporate Edition などで使用される Intel AMS の GetStringAMSHandler 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3268	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224091	5.4	MEDIUM Network	servicenow	it_service_management	ServiceNow IT Service Management Kingston through Patch 14-1, London through Patch 7, and Madrid before patch 4 allow stored XSS via crafted sysparm_item_guid and sys_id parameters in an Incident Req…	CWE-79 Cross-site Scripting	CVE-2019-20768	2024-11-21 13:39	2020-05-6	Show	GitHub Exploit DB Packet Storm

224092	7.8	HIGH Local	lg	bridge	An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur.	CWE-427 Uncontrolled Search Path Element	CVE-2019-20781	2024-11-21 13:39	2020-04-29	Show	GitHub Exploit DB Packet Storm

224093	6.8	MEDIUM Physics	opensc_project	opensc	OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.	CWE-415 Double Free	CVE-2019-20792	2024-11-21 13:39	2020-04-29	Show	GitHub Exploit DB Packet Storm

224094	9.8	CRITICAL Network	google	openthread	OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc.	CWE-787 Out-of-bounds Write	CVE-2019-20791	2024-11-21 13:39	2020-04-29	Show	GitHub Exploit DB Packet Storm

224095	9.8	CRITICAL Network	trusteddomain pypolicyd-spf_project fedoraproject	opendmarc pypolicyd-spf fedora	OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM fi…	CWE-290 Authentication Bypass by Spoofing	CVE-2019-20790	2024-11-21 13:39	2020-04-27	Show	GitHub Exploit DB Packet Storm

224096	4.8	MEDIUM Network	croogo	croogo	Croogo before 3.0.7 allows XSS via the title to admin/menus/menus or admin/taxonomy/vocabularies.	CWE-79 Cross-site Scripting	CVE-2019-20789	2024-11-21 13:39	2020-04-27	Show	GitHub Exploit DB Packet Storm

224097	9.8	CRITICAL Network	libvnc_project canonical debian siemens	libvncserver ubuntu_linux debian_linux simatic_itc1500_firmware simatic_itc1500_pro_firmware simatic_itc1900_firmware simatic_itc1900_pro_firmware simatic_itc2200_firmware sim…	libvncclient/cursor.c in LibVNCServer through 0.9.12 has a HandleCursorShape integer overflow and heap-based buffer overflow via a large height or width value. NOTE: this may overlap CVE-2019-15690.	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2019-20788	2024-11-21 13:39	2020-04-24	Show	GitHub Exploit DB Packet Storm

224098	9.8	CRITICAL Network	teeworlds opensuse	teeworlds leap	Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.	CWE-190 Integer Overflow or Wraparound	CVE-2019-20787	2024-11-21 13:39	2020-04-23	Show	GitHub Exploit DB Packet Storm

224099	9.8	CRITICAL Network	pion	dtls	handleIncomingPacket in conn.go in Pion DTLS before 1.5.2 lacks a check for application data with epoch 0, which allows remote attackers to inject arbitrary unencrypted data after handshake completio…	CWE-287 Improper Authentication	CVE-2019-20786	2024-11-21 13:39	2020-04-20	Show	GitHub Exploit DB Packet Storm

224100	6.8	MEDIUM Physics	google	android	An issue was discovered on LG mobile devices with Android OS 8.0 and 8.1 software for the DTAG carrier. RILD in the radio layer uses an uninitialized variable. The LG ID is LVE-SMP-180013 (January 20…	CWE-908 Use of Uninitialized Resource	CVE-2019-20785	2024-11-21 13:39	2020-04-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed