Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252401	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2182	2010-11-30 14:00	2010-06-10	Show	GitHub Exploit DB Packet Storm

252402	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2181	2010-11-30 13:58	2010-06-10	Show	GitHub Exploit DB Packet Storm

252403	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2180	2010-11-30 13:57	2010-06-10	Show	GitHub Exploit DB Packet Storm

252404	4.3	警告	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2179	2010-11-30 13:54	2010-06-10	Show	GitHub Exploit DB Packet Storm

252405	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2178	2010-11-30 13:53	2010-06-10	Show	GitHub Exploit DB Packet Storm

252406	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2177	2010-11-30 13:52	2010-06-10	Show	GitHub Exploit DB Packet Storm

252407	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2176	2010-11-30 13:49	2010-06-10	Show	GitHub Exploit DB Packet Storm

252408	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2175	2010-11-30 13:47	2010-06-10	Show	GitHub Exploit DB Packet Storm

252409	7.8	危険	アップル	-	Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1843	2010-11-29 15:53	2010-11-16	Show	GitHub Exploit DB Packet Storm

252410	9.3	危険	アップル	-	Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1842	2010-11-29 15:47	2010-11-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199151	9.6	CRITICAL Network	acquia	mautic	A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.	CWE-79 Cross-site Scripting	CVE-2020-35124	2024-11-21 14:26	2021-01-28	Show	GitHub Exploit DB Packet Storm

199152	9.0	CRITICAL Network	acquia	mautic	Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an …	CWE-79 Cross-site Scripting	CVE-2020-35128	2024-11-21 14:26	2021-01-19	Show	GitHub Exploit DB Packet Storm

199153	9.0	CRITICAL Network	mautic	mautic	Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could…	CWE-79 Cross-site Scripting	CVE-2020-35129	2024-11-21 14:26	2021-01-19	Show	GitHub Exploit DB Packet Storm

199154	6.1	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the cConn.jsp file via t…	CWE-79 Cross-site Scripting	CVE-2020-35206	2024-11-21 14:26	2021-01-11	Show	GitHub Exploit DB Packet Storm

199155	9.8	CRITICAL Network	quest	policy_authority_for_unified_communications	Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp fil…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35205	2024-11-21 14:26	2021-01-11	Show	GitHub Exploit DB Packet Storm

199156	6.1	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file …	CWE-79 Cross-site Scripting	CVE-2020-35204	2024-11-21 14:26	2021-01-11	Show	GitHub Exploit DB Packet Storm

199157	6.1	MEDIUM Network	quest	policy_authority_for_unified_communications	Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file vi…	CWE-79 Cross-site Scripting	CVE-2020-35203	2024-11-21 14:26	2021-01-11	Show	GitHub Exploit DB Packet Storm

199158	9.8	CRITICAL Network	agentejo	cockpit	Cockpit before 0.6.1 allows an attacker to inject custom PHP code and achieve Remote Command Execution via registerCriteriaFunction in lib/MongoLite/Database.php, as demonstrated by values in JSON da…	CWE-94 Code Injection	CVE-2020-35131	2024-11-21 14:26	2021-01-9	Show	GitHub Exploit DB Packet Storm

199159	8.8	HIGH Network	mozilla	firefox	Mozilla developers reported memory safety bugs present in Firefox 83. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been expl…	CWE-787 Out-of-bounds Write	CVE-2020-35114	2024-11-21 14:26	2021-01-7	Show	GitHub Exploit DB Packet Storm

199160	8.8	HIGH Network	mozilla	firefox_esr thunderbird firefox	Mozilla developers reported memory safety bugs present in Firefox 83 and Firefox ESR 78.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these…	CWE-787 Out-of-bounds Write	CVE-2020-35113	2024-11-21 14:26	2021-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed