Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 2:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254201 10 危険 マイクロソフト - Microsoft Windows の TCP/IP 実装における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0239 2010-03-1 11:36 2010-02-9 Show GitHub Exploit DB Packet Storm
254202 9.3 危険 マイクロソフト - Microsoft Windows の SMB クライアント実装における権限昇格の脆弱性 CWE-362
競合状態 		CVE-2010-0017 2010-03-1 11:35 2010-02-9 Show GitHub Exploit DB Packet Storm
254203 9.3 危険 マイクロソフト - Microsoft Windows の SMB クライアント実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0016 2010-03-1 11:35 2010-02-9 Show GitHub Exploit DB Packet Storm
254204 5 警告 日立 - uCosminexus Portal Framework におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-02-26 11:36 2010-01-29 Show GitHub Exploit DB Packet Storm
254205 2.6 注意 tDiary開発プロジェクト - tDiary 付属のプラグイン tb-send.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0726 2010-02-25 15:03 2010-02-25 Show GitHub Exploit DB Packet Storm
254206 4.3 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server における HTTP リクエストを非表示にされる脆弱性 CWE-Other
その他 		CVE-2003-1578 2010-02-25 12:36 2003-11-14 Show GitHub Exploit DB Packet Storm
254207 2.6 注意 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるログファイルに任意のテキストを挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2003-1577 2010-02-25 12:36 2003-11-14 Show GitHub Exploit DB Packet Storm
254208 5 警告 IBM - IBM WebSphere Application Server の Single Sign-on 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0563 2010-02-25 12:35 2010-02-5 Show GitHub Exploit DB Packet Storm
254209 5 警告 アップル - Apple Safari の WebKit における任意の Web サイトにリクエストされる脆弱性 CWE-Other
その他 		CVE-2009-2841 2010-02-25 12:33 2009-11-11 Show GitHub Exploit DB Packet Storm
254210 10 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3384 2010-02-25 12:33 2009-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199481 5.5 MEDIUM
Local 		array-queue_project array-queue An issue was discovered in the array-queue crate through 2020-09-26 for Rust. A pop_back() call may lead to a use-after-free. CWE-416
 Use After Free 		CVE-2020-35900 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199482 5.5 MEDIUM
Local 		actix actix-service An issue was discovered in the actix-service crate before 1.0.6 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data. CWE-416
 Use After Free 		CVE-2020-35899 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199483 9.1 CRITICAL
Network 		actix actix-utils An issue was discovered in the actix-utils crate before 2.0.0 for Rust. The Cell implementation allows obtaining more than one mutable reference to the same data. CWE-416
 Use After Free 		CVE-2020-35898 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199484 9.8 CRITICAL
Network 		hgiga msr45_isherlock-user
ssr45_isherlock-user 		HGiga MailSherlock does not validate specific parameters properly. Attackers can use the vulnerability to launch Command inject attacks remotely and execute arbitrary commands of the system. CWE-78
OS Command  		CVE-2020-35851 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199485 7.5 HIGH
Network 		mantisbt mantisbt An issue was discovered in MantisBT before 2.24.4. An incorrect access check in bug_revision_view_page.php allows an unprivileged attacker to view the Summary field of private issues, as well as bugn… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-35849 2024-11-21 14:28 2020-12-31 Show GitHub Exploit DB Packet Storm
199486 6.5 MEDIUM
Network 		cockpit-project cockpit An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't think [it] is a big real-life issue. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-35850 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199487 9.8 CRITICAL
Network 		agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php newpassword function. CWE-89
SQL Injection 		CVE-2020-35848 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199488 9.8 CRITICAL
Network 		agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function. CWE-89
SQL Injection 		CVE-2020-35847 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199489 9.8 CRITICAL
Network 		agentejo cockpit Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php check function. CWE-89
SQL Injection 		CVE-2020-35846 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm
199490 5.4 MEDIUM
Network 		netgear d6200_firmware
d7000_firmware
jnr1010v2_firmware
jr6150_firmware
jwnr2010v5_firmware
r6020_firmware
r6050_firmware
r6080_firmware
r6120_firmware
r6220_firmware
r6260_fir… 		Certain NETGEAR devices are affected by stored XSS. This affects D6200 before 1.1.00.38, D7000 before 1.0.1.78, JNR1010v2 before 1.1.0.62, JR6150 before 1.0.1.24, JWNR2010v5 before 1.1.0.62, R6020 be… CWE-79
Cross-site Scripting 		CVE-2020-35842 2024-11-21 14:28 2020-12-30 Show GitHub Exploit DB Packet Storm