Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252621	9.3	危険	マイクロソフト	-	Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2748	2010-10-26 15:33	2010-10-12	Show	GitHub Exploit DB Packet Storm

252622	9.3	危険	マイクロソフト	-	Microsoft Word および Microsoft Office における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2747	2010-10-26 15:32	2010-10-12	Show	GitHub Exploit DB Packet Storm

252623	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2741	2010-10-26 15:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

252624	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の OpenType Font フォーマットドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2740	2010-10-26 15:29	2010-10-12	Show	GitHub Exploit DB Packet Storm

252625	7.2	危険	マイクロソフト	-	複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2744	2010-10-26 15:28	2010-10-12	Show	GitHub Exploit DB Packet Storm

252626	4.9	警告	マイクロソフト	-	複数の Microsoft 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2549	2010-10-26 15:28	2010-10-12	Show	GitHub Exploit DB Packet Storm

252627	6.5	警告	IBM	-	Linux 上で稼働する IBM DB2 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0462	2010-10-26 15:24	2010-01-28	Show	GitHub Exploit DB Packet Storm

252628	9.3	危険	マイクロソフト	-	64-bit プラットフォーム上で稼働している Microsoft .NET Framework の JIT コンパイラにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3228	2010-10-25 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

252629	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Embedded OpenType Font Engine における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1883	2010-10-25 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

252630	7.6	危険	マイクロソフト	-	複数の Microsoft 製品の Media Player Network Sharing Service における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3225	2010-10-25 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198111	5.5	MEDIUM Local	xcb_project	xcb	An issue was discovered in the xcb crate through 2020-12-10 for Rust. base::Error does not have soundness. Because of the public ptr field, a use-after-free or double-free can occur.	CWE-415 CWE-416 Double Free Use After Free	CVE-2020-36205	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198112	4.7	MEDIUM Local	im_project	im	An issue was discovered in the im crate through 2020-11-09 for Rust. Because TreeFocus does not have bounds on its Send trait or Sync trait, a data race can occur.	NVD-CWE-noinfo	CVE-2020-36204	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198113	4.7	MEDIUM Local	reffers_project	reffers	An issue was discovered in the reffers crate through 2020-12-01 for Rust. ARefss can contain a !Send,!Sync object, leading to a data race and memory corruption.	CWE-362 CWE-787 Race Condition Out-of-bounds Write	CVE-2020-36203	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198114	6.1	MEDIUM Network	rust-lang	async-h1	An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.	CWE-79 Cross-site Scripting	CVE-2020-36202	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198115	6.5	MEDIUM Network	kaspersky	tinycheck	TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-36200	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198116	9.8	CRITICAL Network	kaspersky	tinycheck	TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places.	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2020-36199	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198117	7.5	HIGH Network	xerox	workcentre_3655_firmware workcentre_3655i_firmware workcentre_5865_firmware workcentre_5875_firmware workcentre_5890_firmware workcentre_5865i_firmware workcentre_5875i_firmware …	An issue was discovered in certain Xerox WorkCentre products. They do not properly encrypt passwords. This affects 3655, 3655i, 58XX, 58XXi 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi 78XX, 78XXi, 7970, 79…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-36201	2024-11-21 14:29	2021-01-27	Show	GitHub Exploit DB Packet Storm

198118	7.5	HIGH Network	cskaza	cszcms	SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendmail parameter in csz_model.php.	CWE-89 SQL Injection	CVE-2020-36136	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

198119	5.5	MEDIUM Local	foxit	pdf_reader	Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, allows local attackers to cause a denial of service (DoS) vi…	CWE-120 Classic Buffer Overflow	CVE-2020-35990	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

198120	7.5	HIGH Network	ffmpeg	ffmpeg	An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (DoS).	CWE-476 NULL Pointer Dereference	CVE-2020-36138	2024-11-21 14:28	2023-08-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed