Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253231	6.8	警告	アップルサイバートラスト株式会社 Mozilla Foundation レッドハット	-	libc における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0689	2010-07-13 16:28	2009-07-1	Show	GitHub Exploit DB Packet Storm

253232	6.8	警告	アップル	-	WebKit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2816	2010-07-13 16:28	2009-11-11	Show	GitHub Exploit DB Packet Storm

253233	9.3	危険	アップル	-	Apple Safari の WebKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2195	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

253234	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2416	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

253235	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2414	2010-07-13 16:26	2009-08-11	Show	GitHub Exploit DB Packet Storm

253236	4.3	警告	アップル	-	Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性	CWE-Other その他	CVE-2009-1723	2010-07-13 16:25	2009-08-5	Show	GitHub Exploit DB Packet Storm

253237	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1382	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

253238	3.5	注意	アップル	-	Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性	CWE-16 環境設定	CVE-2010-1381	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

253239	7.5	危険	アップル	-	Apple Mac OS X の cgtexttops CUPS フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1380	2010-07-12 18:11	2010-06-15	Show	GitHub Exploit DB Packet Storm

253240	5	警告	アップル	-	Apple Mac OS X のプリンタ設定におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1379	2010-07-12 18:11	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196841	9.8	CRITICAL Network	fatfreeframework	fat-free_framework	In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method.	CWE-94 CWE-20 Code Injection Improper Input Validation	CVE-2020-5203	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

196842	8.6	HIGH Network	linuxfoundation	dojox	In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language co…	CWE-74 Injection	CVE-2020-5259	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

196843	7.7	HIGH Network	linuxfoundation debian oracle	dojo debian_linux webcenter_sites primavera_unifier communications_policy_management weblogic_server mysql communications_pricing_design_center documaker communications_app…	In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language …	-	CVE-2020-5258	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

196844	8.1	HIGH Network	nethack	nethack	In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-5254	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

196845	9.8	CRITICAL Network	nethack	nethack	NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.	CWE-269 Improper Privilege Management	CVE-2020-5253	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

196846	7.8	HIGH Local	dell	digital_delivery	Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run …	CWE-276 Incorrect Default Permissions	CVE-2020-5342	2024-11-21 14:33	2020-03-10	Show	GitHub Exploit DB Packet Storm

196847	8.8	HIGH Network	bookstackapp	bookstack	BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-5256	2024-11-21 14:33	2020-03-10	Show	GitHub Exploit DB Packet Storm

196848	9.8	CRITICAL Network	dell	emc_isilon_onefs	Dell EMC Isilon OneFS versions prior to 8.2.0 contain an unauthorized access vulnerability due to a lack of thorough authorization checks when SyncIQ is licensed, but encrypted syncs are not marked a…	CWE-306 Missing Authentication for Critical Function	CVE-2020-5328	2024-11-21 14:33	2020-03-7	Show	GitHub Exploit DB Packet Storm

196849	9.8	CRITICAL Network	dell	security_management_server	Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabl…	CWE-502 Deserialization of Untrusted Data	CVE-2020-5327	2024-11-21 14:33	2020-03-7	Show	GitHub Exploit DB Packet Storm

196850	6.3	MEDIUM Network	prestashop	prestashop	In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, …	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-5250	2024-11-21 14:33	2020-03-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed