Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251651	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Font Xtra.x32 モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0556	2011-03-17 08:37	2011-02-8	Show	GitHub Exploit DB Packet Storm

251652	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra.x32 モジュールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-0555	2011-03-17 08:37	2011-02-8	Show	GitHub Exploit DB Packet Storm

251653	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4307	2011-03-17 08:36	2011-02-8	Show	GitHub Exploit DB Packet Storm

251654	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-4306	2011-03-17 08:36	2011-02-8	Show	GitHub Exploit DB Packet Storm

251655	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3d Asset モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4196	2011-03-17 08:36	2011-02-8	Show	GitHub Exploit DB Packet Storm

251656	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0849	2011-03-17 08:18	2010-03-30	Show	GitHub Exploit DB Packet Storm

251657	7.5	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0848	2011-03-17 08:18	2010-03-30	Show	GitHub Exploit DB Packet Storm

251658	7.5	危険	サン・マイクロシステムズ VMware	-	複数の Oracle 製品の Java 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0850	2011-03-17 08:17	2010-03-30	Show	GitHub Exploit DB Packet Storm

251659	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4195	2011-03-11 18:22	2011-02-8	Show	GitHub Exploit DB Packet Storm

251660	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll モジュールにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4194	2011-03-11 18:21	2011-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196651	5.5	MEDIUM Local	f5	nginx_controller	In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments.	CWE-200 Information Exposure	CVE-2020-5866	2024-11-21 14:34	2020-04-24	Show	GitHub Exploit DB Packet Storm

196652	4.8	MEDIUM Network	f5 netapp	nginx_controller cloud_backup	In versions prior to 3.3.0, the NGINX Controller is configured to communicate with its Postgres database server over unencrypted channels, making the communicated data vulnerable to interception via …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-5865	2024-11-21 14:34	2020-04-24	Show	GitHub Exploit DB Packet Storm

196653	7.4	HIGH Network	f5	nginx_controller	In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.	CWE-295 Improper Certificate Validation	CVE-2020-5864	2024-11-21 14:34	2020-04-24	Show	GitHub Exploit DB Packet Storm

196654	7.5	HIGH Network	sharp	aquos_sh-m02_firmware aquos_sh-rm02_firmware aquos_mini_sh-m03_firmware aquos_l2_firmware aquos_sense_lite_sh-m05_firmware aquos_sense_firmware aquos_compact_sh-m06_firmware aquo…	SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build num…	CWE-200 Information Exposure	CVE-2020-5571	2024-11-21 14:34	2020-04-23	Show	GitHub Exploit DB Packet Storm

196655	7.8	HIGH Local	plex	media_server	Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.	CWE-427 Uncontrolled Search Path Element	CVE-2020-5740	2024-11-21 14:34	2020-04-23	Show	GitHub Exploit DB Packet Storm

196656	8.4	HIGH Local	toshiba	password_tool_for_windows	An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO…	CWE-428 Unquoted Search Path or Element	CVE-2020-5569	2024-11-21 14:34	2020-04-20	Show	GitHub Exploit DB Packet Storm

196657	5.4	MEDIUM Network	tenable	tenable.sc	Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation technique…	CWE-79 Cross-site Scripting	CVE-2020-5737	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

196658	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of…	CWE-601 Open Redirect	CVE-2020-5733	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

196659	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticate…	CWE-601 Open Redirect	CVE-2020-5732	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

196660	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5731	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed