Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253351	6.8	警告	アップル	-	Apple Mac OS X の CoreMedia および QuickTime におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0062	2010-04-13 15:17	2010-03-29	Show	GitHub Exploit DB Packet Storm

253352	6.8	警告	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0060	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

253353	6.8	警告	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0059	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

253354	6.4	警告	アップル	-	Apple Mac OS X の ClamAV におけるシステムにウィルスを取り込む脆弱性	CWE-16 環境設定	CVE-2010-0058	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

253355	7.5	危険	アップル	-	Apple Mac OS X の AFP サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-0533	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

253356	7.5	危険	アップル	-	Apple Mac OS X の AFP サーバにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0057	2010-04-13 15:16	2010-03-29	Show	GitHub Exploit DB Packet Storm

253357	6.4	警告	アップル	-	Apple Mac OS X のアプリケーションファイアウォールにおけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2801	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

253358	6.8	警告	アップル	-	Apple Mac OS X の Cocoa のスペルチェック機能におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0056	2010-04-13 15:15	2010-03-29	Show	GitHub Exploit DB Packet Storm

253359	4.4	警告	アップルサイバートラスト株式会社 Carnegie Mellon University (Project Cyrus) レッドハット	-	Cyrus IMAPd にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2632	2010-04-13 14:46	2009-09-10	Show	GitHub Exploit DB Packet Storm

253360	7.5	危険	Haxx アップルサイバートラスト株式会社レッドハット	-	cURL および libcurl における、任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2417	2010-04-13 14:46	2009-08-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198041	5.5	MEDIUM Local	faststone	image_viewer	FastStone Image Viewer 7.5 has an out-of-bounds write (via a crafted image file) at FSViewer.exe+0x956e.	CWE-787 Out-of-bounds Write	CVE-2020-35843	2024-11-21 14:28	2021-01-27	Show	GitHub Exploit DB Packet Storm

198042	6.1	MEDIUM Network	persis	human_resource_management_portal	The job posting recommendation form in Persis Human Resource Management Portal (Versions 17.2.00 through 17.2.35 and 19.0.00 through 19.0.20), when the "Recommend job posting" function is enabled, al…	CWE-79 Cross-site Scripting	CVE-2020-35753	2024-11-21 14:28	2021-01-27	Show	GitHub Exploit DB Packet Storm

198043	9.8	CRITICAL Network	kaspersky	tinycheck	In TinyCheck before commits 9fd360d and ea53de8, the installation script of the tool contained hard-coded credentials to the backend part of the tool. This information could be used by an attacker fo…	CWE-798 Use of Hard-coded Credentials	CVE-2020-35929	2024-11-21 14:28	2021-01-20	Show	GitHub Exploit DB Packet Storm

198044	7.5	HIGH Network	php fedoraproject debian drupal	archive_tar fedora debian_linux drupal	Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.	CWE-22 CWE-59 Path Traversal Link Following	CVE-2020-36193	2024-11-21 14:28	2021-01-19	Show	GitHub Exploit DB Packet Storm

198045	7.7	HIGH Network	presstigers	simple_board_job	Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files …	CWE-22 Path Traversal	CVE-2020-35749	2024-11-21 14:28	2021-01-16	Show	GitHub Exploit DB Packet Storm

198046	5.4	MEDIUM Network	foliovision	fv_flowplayer_video_player	Cross-site scripting (XSS) vulnerability in models/list-table.php in the FV Flowplayer Video Player plugin before 7.4.37.727 for WordPress allows remote authenticated users to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2020-35748	2024-11-21 14:28	2021-01-16	Show	GitHub Exploit DB Packet Storm

198047	5.3	MEDIUM Network	mantisbt	source_integration	An issue was discovered in the Source Integration plugin before 2.4.1 for MantisBT. An attacker can gain access to the Summary field of private Issues (either marked as Private, or part of a private …	NVD-CWE-noinfo	CVE-2020-36192	2024-11-21 14:28	2021-01-19	Show	GitHub Exploit DB Packet Storm

198048	4.5	MEDIUM Network	jupyter	jupyterhub	JupyterHub 1.1.0 allows CSRF in the admin panel via a request that lacks an _xsrf field, as demonstrated by a /hub/api/user request (to add or remove a user account).	CWE-352 Origin Validation Error	CVE-2020-36191	2024-11-21 14:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

198049	6.1	MEDIUM Network	rails_admin_project	rails_admin	RailsAdmin (aka rails_admin) before 1.4.3 and 2.x before 2.0.2 allows XSS via nested forms.	CWE-79 Cross-site Scripting	CVE-2020-36190	2024-11-21 14:28	2021-01-13	Show	GitHub Exploit DB Packet Storm

198050	7.5	HIGH Network	socket	socket.io-parser	socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-36049	2024-11-21 14:28	2021-01-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed