Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252041	7.8	危険	シスコシステムズ	-	Cisco Linksys WRT54GC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-0352	2011-01-21 11:02	2011-01-21	Show	GitHub Exploit DB Packet Storm

252042	9.3	危険	マイクロソフト	-	Microsoft WMI Administrative Tools の WBEMSingleView.ocx ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4588	2011-01-20 13:58	2010-12-23	Show	GitHub Exploit DB Packet Storm

252043	5.8	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の Math.random 関数におけるユーザを追跡される脆弱性	CWE-310 暗号の問題	CVE-2010-3171	2011-01-20 13:51	2010-06-22	Show	GitHub Exploit DB Packet Storm

252044	4.3	警告	Git project レッドハット	-	Git の Gitweb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3906	2011-01-20 13:47	2010-12-14	Show	GitHub Exploit DB Packet Storm

252045	9.3	危険	Google レッドハット	-	Google Chrome の WebM libvpx におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-4203	2011-01-20 13:41	2010-11-4	Show	GitHub Exploit DB Packet Storm

252046	10	危険	Ecava	-	Ecava IntegraXor にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4597	2011-01-20 13:33	2010-12-20	Show	GitHub Exploit DB Packet Storm

252047	9.3	危険	アドビシステムズ	-	Adobe PhotoShop における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-3127	2011-01-20 13:29	2010-08-26	Show	GitHub Exploit DB Packet Storm

252048	6.1	警告	アップル	-	複数の Apple 製品上で稼働する ICMPv6 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2189	2011-01-20 11:14	2010-12-22	Show	GitHub Exploit DB Packet Storm

252049	7.1	危険	アップル	-	複数の Apple 製品上で稼働するネットワークブリッジ機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1804	2011-01-19 16:36	2010-12-22	Show	GitHub Exploit DB Packet Storm

252050	2.6	注意	アップル	-	複数の Apple 製品上で稼働する Application-Level Gateway におけるデバイスの IP アドレスを使用される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0039	2011-01-19 16:34	2010-12-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200061	7.2	HIGH Network	liferay	liferay_portal	Liferay Portal Server tested on 7.3.5 GA6, 7.2.0 GA1 is affected by OS Command Injection. An administrator user can inject Groovy script to execute any OS command on the Liferay Portal Sever. NOTE: T…	CWE-78 OS Command	CVE-2020-28884	2024-11-21 14:23	2022-01-28	Show	GitHub Exploit DB Packet Storm

200062	5.4	MEDIUM Network	checkmk	checkmk	A stored cross site scripting (XSS) vulnerability in Checkmk 1.6.0x prior to 1.6.0p19 allows an authenticated remote attacker to inject arbitrary JavaScript via a javascript: URL in a view title.	CWE-79 Cross-site Scripting	CVE-2020-28919	2024-11-21 14:23	2022-01-16	Show	GitHub Exploit DB Packet Storm

200063	8.8	HIGH Network	zohocorp	manageengine_applications_manager	A vulnerability in the showReports module of Zoho ManageEngine Applications Manager before build 14550 allows authenticated attackers to execute a SQL injection via a crafted request.	CWE-89 SQL Injection	CVE-2020-28679	2024-11-21 14:23	2022-01-11	Show	GitHub Exploit DB Packet Storm

200064	7.5	HIGH Network	sphinxsearch debian	sphinx debian_linux	SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operation…	CWE-22 Path Traversal	CVE-2020-29050	2024-11-21 14:23	2022-01-10	Show	GitHub Exploit DB Packet Storm

200065	6.5	MEDIUM Network	iball	wrd12en_firmware	iBall WRD12EN 1.0.0 devices allow cross-site request forgery (CSRF) attacks as demonstrated by enabling DNS settings or modifying the range for IP addresses.	CWE-352 Origin Validation Error	CVE-2020-29292	2024-11-21 14:23	2021-12-31	Show	GitHub Exploit DB Packet Storm

200066	9.1	CRITICAL Network	zblogcn	z-blogphp	Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \app_del.php.	NVD-CWE-Other	CVE-2020-29177	2024-11-21 14:23	2021-12-3	Show	GitHub Exploit DB Packet Storm

200067	7.8	HIGH Local	zblogcn	z-blogphp	An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-29176	2024-11-21 14:23	2021-12-3	Show	GitHub Exploit DB Packet Storm

200068	7.5	HIGH Network	pybbs_project	pybbs	A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information.	CWE-89 SQL Injection	CVE-2020-28702	2024-11-21 14:23	2021-11-1	Show	GitHub Exploit DB Packet Storm

200069	7.8	HIGH Local	aplixio	pdf_shapingup	Aplioxio PDF ShapingUp 5.0.0.139 contains a buffer overflow which allows attackers to cause a denial of service (DoS) via a crafted PDF file.	CWE-120 Classic Buffer Overflow	CVE-2020-28969	2024-11-21 14:23	2021-10-23	Show	GitHub Exploit DB Packet Storm

200070	5.4	MEDIUM Network	draytek	vigorap_1000c_firmware vigorap_700_firmware vigorap_710_firmware vigorap_800_firmware vigorap_802_firmware vigorap_810_firmware vigorap_900_firmware vigorap_902_firmware vigor…	Draytek VigorAP 1000C contains a stored cross-site scripting (XSS) vulnerability in the RADIUS Setting - RADIUS Server Configuration module. This vulnerability allows attackers to execute arbitrary w…	CWE-79 Cross-site Scripting	CVE-2020-28968	2024-11-21 14:23	2021-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed