Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251601 10 危険 Google - Google Chrome の Google URL Parsing Library における同一生成元ポリシーを回避される脆弱性 CWE-264
CWE-noinfo
CVE-2010-1663 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
251602 7.8 危険 Google - Google Chrome の Google V8 bindings におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1506 2010-11-24 14:58 2010-04-20 Show GitHub Exploit DB Packet Storm
251603 10 危険 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1505 2010-11-24 14:57 2010-04-20 Show GitHub Exploit DB Packet Storm
251604 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1504 2010-11-24 14:57 2010-04-20 Show GitHub Exploit DB Packet Storm
251605 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1503 2010-11-24 14:57 2010-04-20 Show GitHub Exploit DB Packet Storm
251606 9.3 危険 Google - Google Chrome におけるローカルファイルにアクセスされる脆弱性 CWE-noinfo
情報不足 		CVE-2010-1502 2010-11-24 14:56 2010-04-20 Show GitHub Exploit DB Packet Storm
251607 9.3 危険 Google - Google Chrome の ドラッグ＆ドロップ機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2109 2010-11-24 14:56 2010-05-25 Show GitHub Exploit DB Packet Storm
251608 10 危険 Google - Google Chrome における whitelist-mode プラグインブロッカーを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2108 2010-11-24 14:56 2010-05-25 Show GitHub Exploit DB Packet Storm
251609 10 危険 Google - Google Chrome の Safe Browsing 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2107 2010-11-24 14:41 2010-05-25 Show GitHub Exploit DB Packet Storm
251610 10 危険 Google - Google Chrome における URL バーを偽造される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2106 2010-11-24 14:40 2010-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199591 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. CWE-787
 Out-of-bounds Write 		CVE-2020-28011 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199592 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small (on some common platforms). CWE-787
 Out-of-bounds Write 		CVE-2020-28010 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199593 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-28009 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199594 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input s… CWE-269
 Improper Privilege Management 		CVE-2020-28008 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199595 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting crit… CWE-59
Link Following 		CVE-2020-28007 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
199596 5.4 MEDIUM
Network 		online_discussion_forum_project online_discussion_forum The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript t… CWE-79
Cross-site Scripting 		CVE-2020-28141 2024-11-21 14:22 2021-04-20 Show GitHub Exploit DB Packet Storm
199597 8.1 HIGH
Network 		cosori cs158-af_firmware A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker… NVD-CWE-Other
CVE-2020-28593 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
199598 9.8 CRITICAL
Network 		cosori cs158-af_firmware A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote … CWE-787
 Out-of-bounds Write 		CVE-2020-28592 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
199599 5.4 MEDIUM
Network 		lavalite lavalite Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. CWE-79
Cross-site Scripting 		CVE-2020-28124 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
199600 6.5 MEDIUM
Network 		slic3r libslic3r An out-of-bounds read vulnerability exists in the Obj File TriangleMesh::TriangleMesh() functionality of Slic3r libslic3r 1.3.0 and Master Commit 92abbc42. A specially crafted obj file could lead to … CWE-125
Out-of-bounds Read 		CVE-2020-28590 2024-11-21 14:22 2021-04-14 Show GitHub Exploit DB Packet Storm