Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253251	5	警告	freedesktop.org 日本電気サイバートラスト株式会社レッドハット	-	JBIG2 デコーダにおける SplashBitmap に関連する整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1188	2010-05-6 13:46	2009-04-23	Show	GitHub Exploit DB Packet Storm

253252	5	警告	freedesktop.org 日本電気サイバートラスト株式会社レッドハット	-	JBIG2 デコーダにおける CairoOutputDev に関連する整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1187	2010-05-6 13:46	2009-04-23	Show	GitHub Exploit DB Packet Storm

253253	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の custom heap management system におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1241	2010-04-30 10:26	2010-04-5	Show	GitHub Exploit DB Packet Storm

253254	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0204	2010-04-30 10:26	2010-04-13	Show	GitHub Exploit DB Packet Storm

253255	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0203	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

253256	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0202	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

253257	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0201	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

253258	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0199	2010-04-30 10:25	2010-04-13	Show	GitHub Exploit DB Packet Storm

253259	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0198	2010-04-30 10:24	2010-04-13	Show	GitHub Exploit DB Packet Storm

253260	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0197	2010-04-28 15:58	2010-04-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198641	4.8	MEDIUM Network	cxuu	cxuucms	CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add.	CWE-79 Cross-site Scripting	CVE-2020-35346	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198642	7.5	HIGH Network	rockoa	xinhu	rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true.	NVD-CWE-noinfo	CVE-2020-35388	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198643	9.8	CRITICAL Network	tp-link	wa901nd_firmware archer_c5_firmware archer_c7_firmware mr3420_firmware mr6400_firmware wa701nd_firmware wa801nd_firmware wdr3500_firmware wdr3600_firmware we843n_firmware	A password-disclosure issue in the web interface on certain TP-Link devices allows a remote attacker to get full administrative access to the web panel. This affects WA901ND devices before 3.16.9(201…	NVD-CWE-noinfo	CVE-2020-35575	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198644	7.5	HIGH Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to cause a persistent denial of service (segmentation fault) via a long /goform/langSwitch langSelectionOnly parameter.	NVD-CWE-noinfo	CVE-2020-35716	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198645	8.8	HIGH Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the upload_settings.cgi page.	CWE-78 OS Command	CVE-2020-35715	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198646	8.8	HIGH Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program.	CWE-78 OS Command	CVE-2020-35714	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198647	9.8	CRITICAL Network	linksys	re6500_firmware	Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page.	CWE-78 OS Command	CVE-2020-35713	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198648	9.8	CRITICAL Network	esri	arcgis_server	Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-35712	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198649	7.5	HIGH Network	arc-swap_project	arc-swap	An issue has been discovered in the arc-swap crate before 0.4.8 (and 1.x before 1.1.0) for Rust. Use of arc_swap::access::Map with the Constant test helper (or with a user-supplied implementation of …	NVD-CWE-noinfo	CVE-2020-35711	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

198650	5.3	MEDIUM Network	parallels	remote_application_server	Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the…	CWE-200 Information Exposure	CVE-2020-35710	2024-11-21 14:27	2020-12-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed