Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253831	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0245	2010-02-22 12:13	2010-01-21	Show	GitHub Exploit DB Packet Storm

253832	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-DesignError	CVE-2009-4074	2010-02-22 12:13	2009-11-25	Show	GitHub Exploit DB Packet Storm

253833	6.6	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0232	2010-02-22 12:12	2010-01-20	Show	GitHub Exploit DB Packet Storm

253834	10	危険	Rockwell Automation	-	Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性	CWE-noinfo 情報不足	CVE-2009-3739	2010-02-19 14:22	2010-01-21	Show	GitHub Exploit DB Packet Storm

253835	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer において任意のコードが実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0249	2010-02-19 14:21	2010-01-15	Show	GitHub Exploit DB Packet Storm

253836	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2008-0227	2010-02-19 11:37	2008-01-10	Show	GitHub Exploit DB Packet Storm

253837	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0226	2010-02-19 11:32	2008-01-10	Show	GitHub Exploit DB Packet Storm

253838	7.5	危険	Linux レッドハット	-	Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性	-	CVE-2006-6304	2010-02-18 14:28	2006-12-14	Show	GitHub Exploit DB Packet Storm

253839	7.8	危険	Linux レッドハット	-	Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4272	2010-02-18 14:28	2010-01-19	Show	GitHub Exploit DB Packet Storm

253840	9.3	危険	レッドハットリアルネットワークス	-	Realnetworks RealPlayer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4248	2010-02-17 11:48	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 2, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198581	4.3	MEDIUM Network	vasyltech	advanced_access_manager	The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or aam/v2/authenticate). Th…	CWE-200 Information Exposure	CVE-2020-35934	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198582	6.5	MEDIUM Network	thenewsletterplugin	newsletter	A Reflected Authenticated Cross-Site Scripting (XSS) vulnerability in the Newsletter plugin before 6.8.2 for WordPress allows remote attackers to trick a victim into submitting a tnpc_render AJAX req…	CWE-79 Cross-site Scripting	CVE-2020-35933	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198583	8.8	HIGH Network	tribulant	newsletter	Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to …	CWE-502 Deserialization of Untrusted Data	CVE-2020-35932	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198584	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-35931	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198585	5.4	MEDIUM Network	seopanel	seo_panel	Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.	CWE-79 Cross-site Scripting	CVE-2020-35930	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

198586	4.7	MEDIUM Local	atom_project	atom	An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race.	CWE-362 Race Condition	CVE-2020-35897	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198587	7.5	HIGH Network	ws-rs_project	ws-rs	An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-35896	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198588	9.8	CRITICAL Network	stack_project	stack	An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion.	CWE-787 Out-of-bounds Write	CVE-2020-35895	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198589	7.5	HIGH Network	obstack_project	obstack	An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur.	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-35894	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

198590	7.5	HIGH Network	simple-slab_project	simple-slab	An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory.	CWE-193 CWE-401 CWE-908 Off-by-one Error Missing Release of Memory after Effective Lifetime Use of Uninitialized Resource	CVE-2020-35893	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm