Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253031 4.3 警告 サン・マイクロシステムズ
アドビシステムズ		 - Adobe Acrobat におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-2995 2010-02-9 13:55 2009-10-13 Show GitHub Exploit DB Packet Storm
253032 9.3 危険 サン・マイクロシステムズ
アドビシステムズ		 - Adobe Acrobat における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-2989 2010-02-9 13:55 2009-10-13 Show GitHub Exploit DB Packet Storm
253033 9.3 危険 サン・マイクロシステムズ
アドビシステムズ		 - Adobe Acrobat の画像デコーダにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-2984 2010-02-9 13:54 2009-10-13 Show GitHub Exploit DB Packet Storm
253034 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3797 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
253035 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3796 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
253036 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3794 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
253037 10 危険 IBM - IBM Lotus Domino Web Access におけるリンク処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0276 2010-02-8 13:19 2010-01-7 Show GitHub Exploit DB Packet Storm
253038 10 危険 IBM - IBM Lotus Domino Web Access における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4594 2010-02-8 13:19 2009-06-5 Show GitHub Exploit DB Packet Storm
253039 10 危険 IBM - IBM Lotus Domino Web Access の Ultra-light Mode における status-alerts URL の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0275 2010-02-8 13:18 2010-01-7 Show GitHub Exploit DB Packet Storm
253040 10 危険 IBM - IBM Lotus Domino Web Access の Ultra-light Mode における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0274 2010-02-8 13:17 2010-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197661 6.7 MEDIUM
Local 		qnap malware_remover A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue a… CWE-78
OS Command  		CVE-2020-36198 2024-11-21 14:29 2021-05-13 Show GitHub Exploit DB Packet Storm
197662 5.3 MEDIUM
Network 		atlassian data_center
jira
jira_server
jira_data_center 		Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa… CWE-863
 Incorrect Authorization 		CVE-2020-36289 2024-11-21 14:29 2021-05-12 Show GitHub Exploit DB Packet Storm
197663 8.8 HIGH
Network 		themegrill themegrill_demo_importer themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. CWE-352
 Origin Validation Error 		CVE-2020-36334 2024-11-21 14:29 2021-05-5 Show GitHub Exploit DB Packet Storm
197664 9.1 CRITICAL
Network 		themegrill themegrill_demo_importer themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook. CWE-306
Missing Authentication for Critical Function 		CVE-2020-36333 2024-11-21 14:29 2021-05-5 Show GitHub Exploit DB Packet Storm
197665 8.8 HIGH
Network 		bundler
fedoraproject
microsoft 		bundler
fedora
package_manager_configurations 		Bundler 1.16.0 through 2.2.9 and 2.2.11 through 2.2.16 sometimes chooses a dependency source based on the highest gem version number, which means that a rogue gem found at a public source may be chos… NVD-CWE-noinfo
CVE-2020-36327 2024-11-21 14:29 2021-04-29 Show GitHub Exploit DB Packet Storm
197666 9.8 CRITICAL
Network 		phpmailer_project
wordpress 		phpmailer
wordpress 		PHPMailer 6.1.8 through 6.4.0 allows object injection through Phar Deserialization via addAttachment with a UNC pathname. NOTE: this is similar to CVE-2018-19296, but arose because 6.1.8 fixed a func… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-36326 2024-11-21 14:29 2021-04-28 Show GitHub Exploit DB Packet Storm
197667 7.5 HIGH
Network 		jansson_project jansson An issue was discovered in Jansson through 2.13.1. Due to a parsing error in json_loads, there's an out-of-bounds read-access bug. NOTE: the vendor reports that this only occurs when a programmer fai… CWE-125
Out-of-bounds Read 		CVE-2020-36325 2024-11-21 14:29 2021-04-27 Show GitHub Exploit DB Packet Storm
197668 7.5 HIGH
Network 		vaadin flow
vaadin 		Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0 (Vaadin 15 prior to 18) allows attacker… CWE-22
Path Traversal 		CVE-2020-36321 2024-11-21 14:29 2021-04-24 Show GitHub Exploit DB Packet Storm
197669 7.5 HIGH
Network 		vaadin vaadin Unsafe validation RegEx in EmailValidator class in com.vaadin:vaadin-server versions 7.0.0 through 7.7.21 (Vaadin 7.0.0 through 7.7.21) allows attackers to cause uncontrolled resource consumption by … CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-36320 2024-11-21 14:29 2021-04-24 Show GitHub Exploit DB Packet Storm
197670 6.5 MEDIUM
Network 		vaadin flow
vaadin 		Insecure configuration of default ObjectMapper in com.vaadin:flow-server versions 3.0.0 through 3.0.5 (Vaadin 15.0.0 through 15.0.4) may expose sensitive data if the application also uses e.g. @RestC… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-36319 2024-11-21 14:29 2021-04-24 Show GitHub Exploit DB Packet Storm