Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252641 6.8 警告 Redback
Apache Software Foundation		 - Apache Archiva および Apache Continuum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3449 2011-06-10 09:53 2010-11-24 Show GitHub Exploit DB Packet Storm
252642 5 警告 JSecurity
Apache Software Foundation		 - Apache Shiro および JSecurity におけるアクセス制限を回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3863 2011-06-10 09:52 2010-11-5 Show GitHub Exploit DB Packet Storm
252643 4.3 警告 Apache Software Foundation - Apache CouchDB の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3854 2011-06-10 09:52 2011-01-28 Show GitHub Exploit DB Packet Storm
252644 4.3 警告 The Dojo Foundation
Apache Software Foundation		 - Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6726 2011-06-10 09:51 2009-04-9 Show GitHub Exploit DB Packet Storm
252645 4.3 警告 Apache Software Foundation - Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1548 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
252646 7.8 危険 Apache Software Foundation - Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-1547 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
252647 4.3 警告 Apache Software Foundation
レッドハット		 - Apache Struts におけるクロスサイトスクリプティングの脆弱性 - CVE-2005-3745 2011-06-10 09:49 2005-11-22 Show GitHub Exploit DB Packet Storm
252648 4.6 警告 Linux
レッドハット		 - Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-1581 2011-06-9 10:31 2011-05-18 Show GitHub Exploit DB Packet Storm
252649 10 危険 Google
レッドハット		 - Google Chrome におけるアドレスバーを偽装される脆弱性 CWE-DesignError
CVE-2010-3115 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
252650 10 危険 Google
レッドハット		 - Google Chrome の text-editing 実装における脆弱性 CWE-399
リソース管理の問題 		CVE-2010-3114 2011-06-9 10:30 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201341 6.1 MEDIUM
Network 		fiyo fiyo_cms In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack. CWE-79
Cross-site Scripting 		CVE-2020-35373 2024-11-21 14:27 2021-06-18 Show GitHub Exploit DB Packet Storm
201342 7.3 HIGH
Network 		apache
debian
fedoraproject
oracle 		http_server
debian_linux
fedora
instantis_enterprisetrack
enterprise_manager_ops_center
zfs_storage_appliance_kit 		Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP … CWE-787
 Out-of-bounds Write 		CVE-2020-35452 2024-11-21 14:27 2021-06-10 Show GitHub Exploit DB Packet Storm
201343 9.8 CRITICAL
Network 		fangfa fdcms FDCMS (also known as Fangfa Content Management System) 4.0 allows remote attackers to get a webshell in the background via Front/lib/Action/FindexAction.class.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-35442 2024-11-21 14:27 2021-06-3 Show GitHub Exploit DB Packet Storm
201344 9.8 CRITICAL
Network 		fangfa fdcms FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php. CWE-89
SQL Injection 		CVE-2020-35441 2024-11-21 14:27 2021-06-3 Show GitHub Exploit DB Packet Storm
201345 7.0 HIGH
Local 		redhat openshift An insecure modification flaw in the /etc/kubernetes/kubeconfig file was found in OpenShift. This flaw allows an attacker with access to a running container which mounts /etc/kubernetes or has local … - CVE-2020-35514 2024-11-21 14:27 2021-06-2 Show GitHub Exploit DB Packet Storm
201346 5.9 MEDIUM
Network 		redhat jboss-remoting A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes correspondi… - CVE-2020-35510 2024-11-21 14:27 2021-06-2 Show GitHub Exploit DB Packet Storm
201347 6.0 MEDIUM
Local 		qemu
fedoraproject 		qemu
fedora 		A NULL pointer dereference flaw was found in the megasas-gen2 SCSI host bus adapter emulation of QEMU in versions before and including 6.0. This issue occurs in the megasas_command_cancelled() callba… - CVE-2020-35503 2024-11-21 14:27 2021-06-2 Show GitHub Exploit DB Packet Storm
201348 6.7 MEDIUM
Local 		qemu qemu A use-after-free vulnerability was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0 during the handling of the 'Information Transfer' command (CMD_TI). This flaw… - CVE-2020-35506 2024-11-21 14:27 2021-05-28 Show GitHub Exploit DB Packet Storm
201349 4.4 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This f… CWE-476
 NULL Pointer Dereference 		CVE-2020-35505 2024-11-21 14:27 2021-05-28 Show GitHub Exploit DB Packet Storm
201350 6.0 MEDIUM
Local 		qemu
fedoraproject
debian 		qemu
fedora
debian_linux 		A NULL pointer dereference flaw was found in the SCSI emulation support of QEMU in versions before 6.0.0. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in … CWE-476
 NULL Pointer Dereference 		CVE-2020-35504 2024-11-21 14:27 2021-05-28 Show GitHub Exploit DB Packet Storm