Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252381	6.8	警告	アップルサイバートラスト株式会社ターボリナックス FreeType Project オラクルレッドハット	-	FreeType の psh_glyph_find_strong_points 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2498	2010-12-1 15:21	2010-07-12	Show	GitHub Exploit DB Packet Storm

252382	5	警告	The PHP Group アップルターボリナックス	-	PHP の strrchr 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2484	2010-12-1 15:19	2010-07-22	Show	GitHub Exploit DB Packet Storm

252383	9.3	危険	アップルアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2216	2010-12-1 15:12	2010-08-10	Show	GitHub Exploit DB Packet Storm

252384	4.3	警告	アップルアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR におけるクリックジャッキングに関するユーザにリンクを選択させる脆弱性	CWE-Other その他	CVE-2010-2215	2010-12-1 15:11	2010-08-10	Show	GitHub Exploit DB Packet Storm

252385	9.3	危険	アップルアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2214	2010-12-1 15:10	2010-08-10	Show	GitHub Exploit DB Packet Storm

252386	9.3	危険	アップルアドビシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2213	2010-12-1 15:08	2010-08-10	Show	GitHub Exploit DB Packet Storm

252387	5.8	警告	フェンリル株式会社	-	Grani におけるクリップボードの操作に関する脆弱性	CWE-Other その他	CVE-2010-3919	2010-12-1 12:02	2010-12-1	Show	GitHub Exploit DB Packet Storm

252388	5.8	警告	フェンリル株式会社	-	Sleipnir におけるクリップボードの操作に関する脆弱性	CWE-Other その他	CVE-2010-3918	2010-12-1 12:02	2010-12-1	Show	GitHub Exploit DB Packet Storm

252389	6.8	警告	アップル FreeType Project オラクル	-	FreeType における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2497	2010-11-30 14:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

252390	4.9	警告	アップル	-	Apple Mac OS X のカーネルにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1847	2010-11-30 14:25	2010-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199011	9.8	CRITICAL Network	clusterlabs	hawk	An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout rout…	CWE-78 OS Command	CVE-2020-35458	2024-11-21 14:27	2021-01-13	Show	GitHub Exploit DB Packet Storm

199012	5.4	MEDIUM Network	python fedoraproject	pillow fedora	In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.	CWE-125 Out-of-bounds Read	CVE-2020-35655	2024-11-21 14:27	2021-01-12	Show	GitHub Exploit DB Packet Storm

199013	8.8	HIGH Network	python fedoraproject	pillow fedora	In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.	CWE-787 Out-of-bounds Write	CVE-2020-35654	2024-11-21 14:27	2021-01-12	Show	GitHub Exploit DB Packet Storm

199014	7.1	HIGH Network	python fedoraproject debian	pillow fedora debian_linux	In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.	CWE-125 Out-of-bounds Read	CVE-2020-35653	2024-11-21 14:27	2021-01-12	Show	GitHub Exploit DB Packet Storm

199015	8.8	HIGH Network	cacti fedoraproject	cacti fedora	An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site_id paramete…	CWE-89 SQL Injection	CVE-2020-35701	2024-11-21 14:27	2021-01-12	Show	GitHub Exploit DB Packet Storm

199016	7.8	HIGH Local	anydesk	anydesk	AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker to compromise a local user account via a …	CWE-427 Uncontrolled Search Path Element	CVE-2020-35483	2024-11-21 14:27	2021-01-12	Show	GitHub Exploit DB Packet Storm

199017	5.4	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the title parameter. NOT…	CWE-79 Cross-site Scripting	CVE-2020-35727	2024-11-21 14:27	2021-01-11	Show	GitHub Exploit DB Packet Storm

199018	6.1	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports/index.jsp file via …	CWE-79 Cross-site Scripting	CVE-2020-35726	2024-11-21 14:27	2021-01-11	Show	GitHub Exploit DB Packet Storm

199019	6.1	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via the msg parameter. NO…	CWE-79 Cross-site Scripting	CVE-2020-35725	2024-11-21 14:27	2021-01-11	Show	GitHub Exploit DB Packet Storm

199020	5.4	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter (or indire…	CWE-79 Cross-site Scripting	CVE-2020-35724	2024-11-21 14:27	2021-01-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed