Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 2:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252891 9.3 危険 サン・マイクロシステムズ
レッドハット
リアルネットワークス		 - Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 CWE-119
バッファエラー 		CVE-2009-4247 2010-07-23 18:55 2010-01-19 Show GitHub Exploit DB Packet Storm
252892 10 危険 サイバートラスト株式会社
Apache Software Foundation		 - Apache Geronimo の LoginModule 実装における認証要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-4548 2010-07-22 20:51 2007-08-13 Show GitHub Exploit DB Packet Storm
252893 5 警告 サイバートラスト株式会社
Apache Software Foundation		 - Apache Geronimo の management EJB における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5085 2010-07-22 20:51 2007-09-6 Show GitHub Exploit DB Packet Storm
252894 7.5 危険 サイバートラスト株式会社
Apache Software Foundation		 - Apache Geronimo の SQLLoginModule における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5797 2010-07-22 20:51 2007-10-22 Show GitHub Exploit DB Packet Storm
252895 6.8 警告 InterSect Alliance International Pty - Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2594 2010-07-22 20:51 2010-06-30 Show GitHub Exploit DB Packet Storm
252896 5.5 警告 富士通 - Internet Navigware Server における情報漏えいの脆弱性 CWE-200
情報漏えい 		- 2010-07-22 20:51 2010-06-18 Show GitHub Exploit DB Packet Storm
252897 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3726 2010-07-22 17:53 2009-11-9 Show GitHub Exploit DB Packet Storm
252898 5 警告 IBM
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
マイクロソフト
オラクル
OpenOffice.org Project
レッドハット		 - XML 署名の検証において認証回避が可能な問題 CWE-DesignError
CVE-2009-0217 2010-07-22 17:52 2009-07-15 Show GitHub Exploit DB Packet Storm
252899 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2212 2010-07-21 16:31 2010-06-29 Show GitHub Exploit DB Packet Storm
252900 9.3 危険 アドビシステムズ
レッドハット		 - Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2211 2010-07-21 16:31 2010-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198411 9.8 CRITICAL
Network 		clusterlabs hawk An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout rout… CWE-78
OS Command  		CVE-2020-35458 2024-11-21 14:27 2021-01-13 Show GitHub Exploit DB Packet Storm
198412 5.4 MEDIUM
Network 		python
fedoraproject 		pillow
fedora 		In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled. CWE-125
Out-of-bounds Read 		CVE-2020-35655 2024-11-21 14:27 2021-01-12 Show GitHub Exploit DB Packet Storm
198413 8.8 HIGH
Network 		python
fedoraproject 		pillow
fedora 		In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. CWE-787
 Out-of-bounds Write 		CVE-2020-35654 2024-11-21 14:27 2021-01-12 Show GitHub Exploit DB Packet Storm
198414 7.1 HIGH
Network 		python
fedoraproject
debian 		pillow
fedora
debian_linux 		In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations. CWE-125
Out-of-bounds Read 		CVE-2020-35653 2024-11-21 14:27 2021-01-12 Show GitHub Exploit DB Packet Storm
198415 8.8 HIGH
Network 		cacti
fedoraproject 		cacti
fedora 		An issue was discovered in Cacti 1.2.x through 1.2.16. A SQL injection vulnerability in data_debug.php allows remote authenticated attackers to execute arbitrary SQL commands via the site_id paramete… CWE-89
SQL Injection 		CVE-2020-35701 2024-11-21 14:27 2021-01-12 Show GitHub Exploit DB Packet Storm
198416 7.8 HIGH
Local 		anydesk anydesk AnyDesk before 6.1.0 on Windows, when run in portable mode on a system where the attacker has write access to the application directory, allows this attacker to compromise a local user account via a … CWE-427
 Uncontrolled Search Path Element 		CVE-2020-35483 2024-11-21 14:27 2021-01-12 Show GitHub Exploit DB Packet Storm
198417 5.4 MEDIUM
Network 		quest policy_authority_for_unified_communications Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the title parameter. NOT… CWE-79
Cross-site Scripting 		CVE-2020-35727 2024-11-21 14:27 2021-01-11 Show GitHub Exploit DB Packet Storm
198418 6.1 MEDIUM
Network 		quest policy_authority_for_unified_communications Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports/index.jsp file via … CWE-79
Cross-site Scripting 		CVE-2020-35726 2024-11-21 14:27 2021-01-11 Show GitHub Exploit DB Packet Storm
198419 6.1 MEDIUM
Network 		quest policy_authority_for_unified_communications Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via the msg parameter. NO… CWE-79
Cross-site Scripting 		CVE-2020-35725 2024-11-21 14:27 2021-01-11 Show GitHub Exploit DB Packet Storm
198420 5.4 MEDIUM
Network 		quest policy_authority_for_unified_communications Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter (or indire… CWE-79
Cross-site Scripting 		CVE-2020-35724 2024-11-21 14:27 2021-01-11 Show GitHub Exploit DB Packet Storm