Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252041	5.8	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の Math.random 関数におけるユーザを追跡される脆弱性	CWE-310 暗号の問題	CVE-2010-3171	2011-01-20 13:51	2010-06-22	Show	GitHub Exploit DB Packet Storm

252042	4.3	警告	Git project レッドハット	-	Git の Gitweb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3906	2011-01-20 13:47	2010-12-14	Show	GitHub Exploit DB Packet Storm

252043	9.3	危険	Google レッドハット	-	Google Chrome の WebM libvpx におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-4203	2011-01-20 13:41	2010-11-4	Show	GitHub Exploit DB Packet Storm

252044	10	危険	Ecava	-	Ecava IntegraXor にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4597	2011-01-20 13:33	2010-12-20	Show	GitHub Exploit DB Packet Storm

252045	9.3	危険	アドビシステムズ	-	Adobe PhotoShop における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3127	2011-01-20 13:29	2010-08-26	Show	GitHub Exploit DB Packet Storm

252046	6.1	警告	アップル	-	複数の Apple 製品上で稼働する ICMPv6 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2189	2011-01-20 11:14	2010-12-22	Show	GitHub Exploit DB Packet Storm

252047	7.1	危険	アップル	-	複数の Apple 製品上で稼働するネットワークブリッジ機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1804	2011-01-19 16:36	2010-12-22	Show	GitHub Exploit DB Packet Storm

252048	2.6	注意	アップル	-	複数の Apple 製品上で稼働する Application-Level Gateway におけるデバイスの IP アドレスを使用される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0039	2011-01-19 16:34	2010-12-22	Show	GitHub Exploit DB Packet Storm

252049	-	-	Invensys	-	Wonderware InBatch と I/A Series Batch の database lock manager service (lm_tcp) にバッファオーバーフローの脆弱性	-	-	2011-01-19 15:54	2010-12-16	Show	GitHub Exploit DB Packet Storm

252050	6.9	警告	Exim Development レッドハット	-	Exim における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4345	2011-01-19 15:41	2010-12-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199761	8.8	HIGH Network	zohocorp	manageengine_applications_manager	A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.	CWE-89 SQL Injection	CVE-2020-28679	2024-11-21 14:23	2022-01-11	Show	GitHub Exploit DB Packet Storm

199762	7.5	HIGH Network	sphinxsearch debian	sphinx debian_linux	SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operation…	CWE-22 Path Traversal	CVE-2020-29050	2024-11-21 14:23	2022-01-10	Show	GitHub Exploit DB Packet Storm

199763	6.5	MEDIUM Network	iball	wrd12en_firmware	iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range for IP addresses.	CWE-352 Origin Validation Error	CVE-2020-29292	2024-11-21 14:23	2021-12-31	Show	GitHub Exploit DB Packet Storm

199764	9.1	CRITICAL Network	zblogcn	z-blogphp	Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.	NVD-CWE-Other	CVE-2020-29177	2024-11-21 14:23	2021-12-3	Show	GitHub Exploit DB Packet Storm

199765	7.8	HIGH Local	zblogcn	z-blogphp	An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-29176	2024-11-21 14:23	2021-12-3	Show	GitHub Exploit DB Packet Storm

199766	7.5	HIGH Network	pybbs_project	pybbs	A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.	CWE-89 SQL Injection	CVE-2020-28702	2024-11-21 14:23	2021-11-1	Show	GitHub Exploit DB Packet Storm

199767	7.8	HIGH Local	aplixio	pdf_shapingup	Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) via a crafted PDF file.	CWE-120 Classic Buffer Overflow	CVE-2020-28969	2024-11-21 14:23	2021-10-23	Show	GitHub Exploit DB Packet Storm

199768	5.4	MEDIUM Network	draytek	vigorap_1000c_firmware vigorap_700_firmware vigorap_710_firmware vigorap_800_firmware vigorap_802_firmware vigorap_810_firmware vigorap_900_firmware vigorap_902_firmware vigor…	Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary w…	CWE-79 Cross-site Scripting	CVE-2020-28968	2024-11-21 14:23	2021-10-23	Show	GitHub Exploit DB Packet Storm

199769	8.8	HIGH Network	flashget	flashget	FlashGet v1.9.6 was discovered to contain a buffer overflow in the 'current path directory' function. This vulnerability allows attackers to elevate local process privileges via overwriting the regis…	CWE-120 Classic Buffer Overflow	CVE-2020-28967	2024-11-21 14:23	2021-10-23	Show	GitHub Exploit DB Packet Storm

199770	6.7	MEDIUM Local	tonec	internet_download_manager	Internet Download Manager 6.37.11.1 was discovered to contain a stack buffer overflow in the Search function. This vulnerability allows attackers to escalate local process privileges via unspecified …	CWE-787 Out-of-bounds Write	CVE-2020-28964	2024-11-21 14:23	2021-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed