Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254861	9.3	危険	アップル	-	Apple Mac OS の ColorSync における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-1726	2010-06-30 18:17	2009-08-5	Show	GitHub Exploit DB Packet Storm

254862	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意のファイルを削除される脆弱性	CWE-362 競合状態	CVE-2008-5303	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

254863	6.9	警告	アップルサイバートラスト株式会社 The Perl Foundation レッドハット	-	Perl の rmtree 関数における任意の setuid バイナリを作成される脆弱性	CWE-362 競合状態	CVE-2008-5302	2010-06-30 18:16	2008-12-1	Show	GitHub Exploit DB Packet Storm

254864	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1419	2010-06-29 16:59	2010-06-10	Show	GitHub Exploit DB Packet Storm

254865	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1412	2010-06-25 18:51	2010-06-10	Show	GitHub Exploit DB Packet Storm

254866	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1749	2010-06-24 15:38	2010-06-10	Show	GitHub Exploit DB Packet Storm

254867	7.8	危険	日立	-	JP1/ServerConductor/Deployment Manager における不正にシャットダウンまたはリブートを実行する脆弱性	CWE-noinfo 情報不足	-	2010-06-22 17:28	2010-06-4	Show	GitHub Exploit DB Packet Storm

254868	6.8	警告	pon software	-	Explzh におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2434	2010-06-22 14:01	2010-06-22	Show	GitHub Exploit DB Packet Storm

254869	4.3	警告	アップル	-	Apple Safari の WebKit における任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-1388	2010-06-21 16:56	2010-06-10	Show	GitHub Exploit DB Packet Storm

254870	9.3	危険	アップル	-	Apple Safari における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1750	2010-06-18 18:21	2010-06-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201011	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Users Access Groups' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted paylo…	CWE-79 Cross-site Scripting	CVE-2020-35986	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

201012	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Global Lists" feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente…	CWE-79 Cross-site Scripting	CVE-2020-35985	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

201013	5.4	MEDIUM Network	rukovoditel	rukovoditel	A stored cross site scripting (XSS) vulnerability in the 'Users Alerts' feature of Rukovoditel 2.7.2 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload ente…	CWE-79 Cross-site Scripting	CVE-2020-35984	2024-11-21 14:28	2021-07-10	Show	GitHub Exploit DB Packet Storm

201014	6.1	MEDIUM Network	qnap	qulog_center	A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc.…	CWE-79 Cross-site Scripting	CVE-2020-36196	2024-11-21 14:28	2021-07-1	Show	GitHub Exploit DB Packet Storm

201015	6.1	MEDIUM Network	qnap	quts_hero qts	An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. …	CWE-79 Cross-site Scripting	CVE-2020-36194	2024-11-21 14:28	2021-07-1	Show	GitHub Exploit DB Packet Storm

201016	2.7	LOW Network	bloofox	bloofoxcms	bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.	CWE-22 Path Traversal	CVE-2020-35762	2024-11-21 14:28	2021-06-17	Show	GitHub Exploit DB Packet Storm

201017	5.4	MEDIUM Network	bloofox	bloofoxcms	bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code.	CWE-79 Cross-site Scripting	CVE-2020-35761	2024-11-21 14:28	2021-06-17	Show	GitHub Exploit DB Packet Storm

201018	9.8	CRITICAL Network	bloofox	bloofoxcms	bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files).	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-35760	2024-11-21 14:28	2021-06-17	Show	GitHub Exploit DB Packet Storm

201019	6.5	MEDIUM Network	bloofox	bloofoxcms	bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content (Locally/Remotely).	CWE-352 Origin Validation Error	CVE-2020-35759	2024-11-21 14:28	2021-06-17	Show	GitHub Exploit DB Packet Storm

201020	6.5	MEDIUM Network	bloofox	bloofoxcms	BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter.	CWE-22 Path Traversal	CVE-2020-36142	2024-11-21 14:28	2021-06-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed