Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251901	4.3	警告	サイバートラスト株式会社 Rdesktop レッドハット	-	rdesktop の disk_create 関数におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1595	2011-06-3 09:50	2010-05-8	Show	GitHub Exploit DB Packet Storm

251902	4.3	警告	GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Mailman の Cgi/confirm.py におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0707	2011-06-3 08:58	2011-02-22	Show	GitHub Exploit DB Packet Storm

251903	3.5	注意	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Mailman におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3089	2011-06-3 08:56	2011-03-1	Show	GitHub Exploit DB Packet Storm

251904	4.3	警告	アップル GNU Project ターボリナックスサイバートラスト株式会社レッドハット	-	Mailman における複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0564	2011-06-3 08:55	2008-02-5	Show	GitHub Exploit DB Packet Storm

251905	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるスタックベースのオーバーフロー脆弱性	CWE-119 バッファエラー	CVE-2011-1567	2011-06-2 09:51	2011-04-5	Show	GitHub Exploit DB Packet Storm

251906	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の dc.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1566	2011-06-2 09:50	2011-04-5	Show	GitHub Exploit DB Packet Storm

251907	10	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System の IGSSdataServer.exe におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1565	2011-06-2 09:48	2011-04-5	Show	GitHub Exploit DB Packet Storm

251908	10	危険	RealFlex Technologies	-	DATAC RealFlex RealWin の HMI アプリケーションにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-1564	2011-06-2 09:47	2011-04-5	Show	GitHub Exploit DB Packet Storm

251909	10	危険	RealFlex Technologies	-	DATAC RealFlex RealWin の HMI アプリケーションにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-1563	2011-06-2 09:46	2011-04-5	Show	GitHub Exploit DB Packet Storm

251910	4.7	警告	レッドハット Richard W.M. Jones	-	virt-v2v および virt-inspector などの製品に使用される libguestfs におけるホスト OS 上のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-3851	2011-06-1 10:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196171	8.8	HIGH Network	systeminformation	systeminformation	This affects the package systeminformation before 4.27.11. This package is vulnerable to Command Injection. The attacker can concatenate curl's parameters to overwrite Javascript files and then execu…	CWE-78 OS Command	CVE-2020-7752	2024-11-21 14:37	2020-10-27	Show	GitHub Exploit DB Packet Storm

196172	7.2	HIGH Network	chaijis	pathval	pathval before version 1.1.1 is vulnerable to prototype pollution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7751	2024-11-21 14:37	2020-10-26	Show	GitHub Exploit DB Packet Storm

196173	9.6	CRITICAL Network	mit	scratch-svg-renderer	This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used to inject arbitrary elements into the DOM…	CWE-79 Cross-site Scripting	CVE-2020-7750	2024-11-21 14:37	2020-10-22	Show	GitHub Exploit DB Packet Storm

196174	4.3	MEDIUM Network	raiseitsolutions	rits_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browse…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2020-7371	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

196175	4.3	MEDIUM Network	boltbrowser	bolt_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of Danyil Vasilenko's Bolt Browser allows an attacker to obfuscate the true source of data as presented …	CWE-306 Missing Authentication for Critical Function	CVE-2020-7370	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

196176	4.3	MEDIUM Network	yandex	yandex_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browse…	CWE-306 Missing Authentication for Critical Function	CVE-2020-7369	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

196177	4.3	MEDIUM Network	ucweb	uc_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browse…	NVD-CWE-Other	CVE-2020-7364	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

196178	4.3	MEDIUM Network	ucweb	uc_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browse…	NVD-CWE-noinfo	CVE-2020-7363	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

196179	7.6	HIGH Network	osm-static-maps_project	osm-static-maps	This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template without escaping ({{{ ... }}}). As such, it is possible for an attacker to injec…	CWE-79 CWE-74 Cross-site Scripting Injection	CVE-2020-7749	2024-11-21 14:37	2020-10-20	Show	GitHub Exploit DB Packet Storm

196180	8.1	HIGH Network	ts.ed_project	ts.ed	This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attac…	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7748	2024-11-21 14:37	2020-10-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed