Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253561 9.3 危険 アップル
アドビシステムズ
ターボリナックス
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2178 2010-11-30 13:53 2010-06-10 Show GitHub Exploit DB Packet Storm
253562 9.3 危険 アップル
アドビシステムズ
ターボリナックス
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2177 2010-11-30 13:52 2010-06-10 Show GitHub Exploit DB Packet Storm
253563 9.3 危険 アップル
アドビシステムズ
ターボリナックス
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2176 2010-11-30 13:49 2010-06-10 Show GitHub Exploit DB Packet Storm
253564 9.3 危険 アップル
アドビシステムズ
ターボリナックス
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2175 2010-11-30 13:47 2010-06-10 Show GitHub Exploit DB Packet Storm
253565 7.8 危険 アップル - Apple Mac OS X の Networking におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-1843 2010-11-29 15:53 2010-11-16 Show GitHub Exploit DB Packet Storm
253566 9.3 危険 アップル - Apple Mac OS X の AppKit におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1842 2010-11-29 15:47 2010-11-15 Show GitHub Exploit DB Packet Storm
253567 9.3 危険 アップル - Apple Mac OS X の Disk Image における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-1841 2010-11-29 15:45 2010-11-15 Show GitHub Exploit DB Packet Storm
253568 7.5 危険 アップル - Apple Mac OS X の password-validation 機能におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1840 2010-11-29 15:43 2010-11-15 Show GitHub Exploit DB Packet Storm
253569 4.4 警告 アップル - Apple Mac OS X の Directory Services における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2010-1838 2010-11-29 15:41 2010-11-15 Show GitHub Exploit DB Packet Storm
253570 9.3 危険 アップル
アドビシステムズ
ターボリナックス
レッドハット
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-2174 2010-11-29 15:33 2010-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209471 6.1 MEDIUM
Network
hcltech notes HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to exec… CWE-79
Cross-site Scripting
CVE-2020-14240 2024-11-21 14:02 2020-11-6 Show GitHub Exploit DB Packet Storm
209472 6.1 MEDIUM
Network
hcltech hcl_digital_experience HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a cr… CWE-79
Cross-site Scripting
CVE-2020-14222 2024-11-21 14:02 2020-11-6 Show GitHub Exploit DB Packet Storm
209473 5.3 MEDIUM
Network
apache kylin Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, … CWE-922
 Insecure Storage of Sensitive Information
CVE-2020-13937 2024-11-21 14:02 2020-10-20 Show GitHub Exploit DB Packet Storm
209474 5.4 MEDIUM
Network
sage easypay Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Trans… CWE-79
Cross-site Scripting
CVE-2020-13893 2024-11-21 14:02 2020-10-19 Show GitHub Exploit DB Packet Storm
209475 6.5 MEDIUM
Network
redhat single_sign-on
openshift_application_runtimes
jboss_enterprise_application_platform
A flaw was found in JBoss EAP, where the authentication configuration is set-up using a legacy SecurityRealm, to delegate to a legacy PicketBox SecurityDomain, and then reloaded to admin-only mode. T… CWE-287
Improper Authentication
CVE-2020-14299 2024-11-21 14:02 2020-10-16 Show GitHub Exploit DB Packet Storm
209476 5.3 MEDIUM
Network
atlassian jira
jira_server
Affected versions of Jira Server allow remote unauthenticated attackers to enumerate issue keys via a missing permissions check in the ActionsAndOperations resource. The affected versions are before … CWE-862
 Missing Authorization
CVE-2020-14185 2024-11-21 14:02 2020-10-16 Show GitHub Exploit DB Packet Storm
209477 7.2 HIGH
Network
gitea gitea The git hook feature in Gitea 1.1.0 through 1.12.5 might allow for authenticated remote code execution in customer environments where the documentation was not understood (e.g., one viewpoint is that… CWE-78
OS Command 
CVE-2020-14144 2024-11-21 14:02 2020-10-16 Show GitHub Exploit DB Packet Storm
209478 9.8 CRITICAL
Network
apache solr Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that… CWE-863
 Incorrect Authorization
CVE-2020-13957 2024-11-21 14:02 2020-10-14 Show GitHub Exploit DB Packet Storm
209479 4.3 MEDIUM
Network
apache
debian
oracle
tomcat
debian_linux
instantis_enterprisetrack
sd-wan_edge
If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation o… NVD-CWE-noinfo
CVE-2020-13943 2024-11-21 14:02 2020-10-12 Show GitHub Exploit DB Packet Storm
209480 5.4 MEDIUM
Network
atlassian jira
jira_server
Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected… CWE-79
Cross-site Scripting
CVE-2020-14184 2024-11-21 14:02 2020-10-12 Show GitHub Exploit DB Packet Storm