Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254211	7.1	危険	アップル	-	Apple Mac OS X の Image Capture におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1844	2010-11-30 14:19	2010-11-16	Show	GitHub Exploit DB Packet Storm

254212	9.3	危険	アップルアドビシステムズターボリナックス	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2189	2010-11-30 14:08	2010-06-10	Show	GitHub Exploit DB Packet Storm

254213	9.3	危険	アップルアドビシステムズターボリナックスヒューレット・パッカードレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2188	2010-11-30 14:07	2010-06-10	Show	GitHub Exploit DB Packet Storm

254214	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2187	2010-11-30 14:06	2010-06-10	Show	GitHub Exploit DB Packet Storm

254215	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 CWE-noinfo	CVE-2010-2186	2010-11-30 14:05	2010-06-10	Show	GitHub Exploit DB Packet Storm

254216	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2185	2010-11-30 14:04	2010-06-10	Show	GitHub Exploit DB Packet Storm

254217	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2184	2010-11-30 14:03	2010-06-10	Show	GitHub Exploit DB Packet Storm

254218	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2183	2010-11-30 14:01	2010-06-10	Show	GitHub Exploit DB Packet Storm

254219	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2182	2010-11-30 14:00	2010-06-10	Show	GitHub Exploit DB Packet Storm

254220	9.3	危険	アップルアドビシステムズターボリナックスレッドハット	-	Adobe Flash Player および Adobe AIR における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2181	2010-11-30 13:58	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208991	7.2	HIGH Network	pluxxml	pluxxml	In PluxXml V5.7,the theme edit function /PluXml/core/admin/parametres_edittpl.php allows remote attackers to execute arbitrary PHP code by placing this code into a template.	NVD-CWE-noinfo	CVE-2020-18184	2024-11-21 14:08	2020-10-2	Show	GitHub Exploit DB Packet Storm

208992	4.3	MEDIUM Network	powerdns	authoritative	An issue has been found in PowerDNS Authoritative Server before 4.3.1 where an authorized user with the ability to insert crafted records into a zone might be able to leak the content of uninitialize…	CWE-908 Use of Uninitialized Resource	CVE-2020-17482	2024-11-21 14:08	2020-10-2	Show	GitHub Exploit DB Packet Storm

208993	7.5	HIGH Network	nec	expresscluster_x	This vulnerability allows remote attackers to disclose sensitive information on affected installations of NEC ExpressCluster 4.1. Authentication is not required to exploit this vulnerability. The spe…	-	CVE-2020-17408	2024-11-21 14:08	2020-09-11	Show	GitHub Exploit DB Packet Storm

208994	5.4	MEDIUM Network	fabbricadigitale	multiux	A post-authenticated stored XSS was found in MultiUx v.3.1.12.0 via the /multiux/SaveMailbox LastName field.	CWE-79 Cross-site Scripting	CVE-2020-17458	2024-11-21 14:08	2020-09-2	Show	GitHub Exploit DB Packet Storm

208995	8.8	HIGH Adjacent	senstar	symphony	This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Senstar Symphony 7.3.2.2. Authentication is not required to exploit this vulnerability. The…	-	CVE-2020-17405	2024-11-21 14:08	2020-09-2	Show	GitHub Exploit DB Packet Storm

208996	6.1	MEDIUM Network	forgerock	identity_manager	Dashboards and progressiveProfileForms in ForgeRock Identity Manager before 7.0.0 are vulnerable to stored XSS. The vulnerability affects versions 6.5.0.4, 6.0.0.6.	CWE-79 Cross-site Scripting	CVE-2020-17465	2024-11-21 14:08	2020-09-1	Show	GitHub Exploit DB Packet Storm

208997	5.4	MEDIUM Network	halo	halo	Halo blog 1.2.0 allows users to submit comments on blog posts via /api/content/posts/comments. The javascript code supplied by the attacker will then execute in the victim user's browser.	CWE-79 Cross-site Scripting	CVE-2020-19007	2024-11-21 14:08	2020-08-26	Show	GitHub Exploit DB Packet Storm

208998	5.7	MEDIUM Network	zrlog	zrlog	zrlog v2.1.0 has a vulnerability with the permission check. If admin account is logged in, other unauthorized users can download the database backup file directly.	CWE-863 Incorrect Authorization	CVE-2020-19005	2024-11-21 14:08	2020-08-26	Show	GitHub Exploit DB Packet Storm

208999	7.8	HIGH Local	foxitsoftware	foxit_studio_photo	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the …	-	CVE-2020-17404	2024-11-21 14:08	2020-08-26	Show	GitHub Exploit DB Packet Storm

209000	7.8	HIGH Local	foxitsoftware	foxit_studio_photo	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.922. User interaction is required to exploit this vulnerability in that the …	-	CVE-2020-17403	2024-11-21 14:08	2020-08-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed