Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253541	9.3	危険	アップル	-	Apple QuickTime における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0527	2010-04-26 16:58	2010-03-31	Show	GitHub Exploit DB Packet Storm

253542	5	警告	アップルサイバートラスト株式会社 Ruby-lang.org レッドハット	-	Ruby の BigDecimal ライブラリにおけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-1904	2010-04-26 16:46	2009-06-9	Show	GitHub Exploit DB Packet Storm

253543	6.9	警告	アップル Vim	-	Vim の Python インターフェースの src/if_python.c における信頼性のない検索パスの脆弱性	CWE-Other その他	CVE-2009-0316	2010-04-26 16:45	2009-01-28	Show	GitHub Exploit DB Packet Storm

253544	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim におけるエスケープ文字を適切に処理しないことに関する任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4101	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

253545	9.3	危険	アップルサイバートラスト株式会社 Vim レッドハット	-	Vim における適切に入力をサニタイズしないことに関する任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-2712	2010-04-26 16:45	2008-10-9	Show	GitHub Exploit DB Packet Storm

253546	4.3	警告	VMware	-	VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1193	2010-04-21 17:54	2010-03-29	Show	GitHub Exploit DB Packet Storm

253547	7.5	危険	VMware	-	複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0686	2010-04-21 17:53	2010-03-29	Show	GitHub Exploit DB Packet Storm

253548	4.3	警告	VMware	-	複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1137	2010-04-21 17:51	2010-03-29	Show	GitHub Exploit DB Packet Storm

253549	4.6	警告	GNU Project サイバートラスト株式会社レッドハット	-	GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4029	2010-04-21 17:51	2009-12-20	Show	GitHub Exploit DB Packet Storm

253550	5	警告	Linux レッドハット	-	Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0741	2010-04-21 17:48	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210151	4.8	MEDIUM Network	nagios	nagios_xi	Nagios XI 5.6.11 allows XSS via the account/main.php theme parameter.	CWE-79 Cross-site Scripting	CVE-2020-10821	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210152	4.8	MEDIUM Network	nagios	nagios_xi	Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ password parameter.	CWE-79 Cross-site Scripting	CVE-2020-10820	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210153	4.8	MEDIUM Network	nagios	nagios_xi	Nagios XI 5.6.11 allows XSS via the includes/components/ldap_ad_integration/ username parameter.	CWE-79 Cross-site Scripting	CVE-2020-10819	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210154	7.2	HIGH Network	articatech	artica_proxy	Artica Proxy 4.26 allows remote command execution for an authenticated user via shell metacharacters in the "Modify the hostname" field.	CWE-78 OS Command	CVE-2020-10818	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210155	5.5	MEDIUM Local	hdfgroup	hdf5	An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5F_get_nrefs() located in H5Fquery.c. It allows an attacker to cause Denial of Service.	CWE-476 NULL Pointer Dereference	CVE-2020-10812	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210156	5.5	MEDIUM Local	hdfgroup	hdf5	An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5O__layout_decode() located in H5Olayout.c. It allows an attacker to cause Denial of Service.	CWE-125 Out-of-bounds Read	CVE-2020-10811	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210157	5.5	MEDIUM Local	hdfgroup	hdf5	An issue was discovered in HDF5 through 1.12.0. A NULL pointer dereference exists in the function H5AC_unpin_entry() located in H5AC.c. It allows an attacker to cause Denial of Service.	CWE-476 NULL Pointer Dereference	CVE-2020-10810	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210158	5.5	MEDIUM Local	hdfgroup	hdf5	An issue was discovered in HDF5 through 1.12.0. A heap-based buffer overflow exists in the function Decompress() located in decompress.c. It can be triggered by sending a crafted file to the gif2h5 b…	CWE-787 Out-of-bounds Write	CVE-2020-10809	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210159	8.8	HIGH Network	vestacp	vesta_control_panel	Vesta Control Panel (VestaCP) through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demon…	CWE-78 OS Command	CVE-2020-10808	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

210160	5.3	MEDIUM Network	mitre	caldera	auth_svc in Caldera before 2.6.5 allows authentication bypass (for REST API requests) via a forged "localhost" string in the HTTP Host header.	CWE-290 Authentication Bypass by Spoofing	CVE-2020-10807	2024-11-21 13:56	2020-03-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed