Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255101	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3955	2010-02-10 13:38	2010-01-12	Show	GitHub Exploit DB Packet Storm

255102	10	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat の 3D 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3954	2010-02-10 13:38	2010-01-12	Show	GitHub Exploit DB Packet Storm

255103	6.8	警告	サン・マイクロシステムズ	-	Sun Solaris の Trusted Extensions における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0310	2010-02-10 13:38	2010-01-11	Show	GitHub Exploit DB Packet Storm

255104	7.1	危険	アップルアドビシステムズ	-	Windows 上で稼動する Adobe Flash Player および Adobe AIR の Flash Player の ActiveX コントロールにおけるローカルファイルのファイル名を取得される脆弱性	CWE-200 情報漏えい	CVE-2009-3951	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

255105	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-3800	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

255106	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR の Verifier::parseExceptionHandlers 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3799	2010-02-10 13:36	2009-12-8	Show	GitHub Exploit DB Packet Storm

255107	9.3	危険	アップルアドビシステムズサン・マイクロシステムズレッドハット	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-3798	2010-02-10 13:35	2009-12-8	Show	GitHub Exploit DB Packet Storm

255108	9.3	危険	マイクロソフト	-	Microsoft Windows XP で提供される Adobe Flash Player 6 における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0378	2010-02-9 13:56	2010-01-12	Show	GitHub Exploit DB Packet Storm

255109	9.3	危険	マイクロソフト	-	Microsoft Windows の Embedded OpenType フォントエンジンにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0018	2010-02-9 13:55	2010-01-12	Show	GitHub Exploit DB Packet Storm

255110	9.3	危険	サン・マイクロシステムズアドビシステムズ	-	Adobe Acrobat におけるファイル拡張子の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3461	2010-02-9 13:55	2009-10-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198181	8.4	HIGH Local	toshiba	password_tool_for_windows	An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO…	CWE-428 Unquoted Search Path or Element	CVE-2020-5569	2024-11-21 14:34	2020-04-20	Show	GitHub Exploit DB Packet Storm

198182	5.4	MEDIUM Network	tenable	tenable.sc	Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation technique…	CWE-79 Cross-site Scripting	CVE-2020-5737	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198183	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of…	CWE-601 Open Redirect	CVE-2020-5733	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198184	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticate…	CWE-601 Open Redirect	CVE-2020-5732	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198185	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5731	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198186	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5730	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198187	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is su…	CWE-79 Cross-site Scripting	CVE-2020-5729	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198188	6.1	MEDIUM Network	openmrs	openmrs	OpenMRS 2.9 and prior copies "Referrer" header values into an html element named "redirectUrl" within many webpages (such as login.htm). There is insufficient validation for this parameter, which all…	CWE-79 CWE-20 Cross-site Scripting Improper Input Validation	CVE-2020-5728	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

198189	5.5	MEDIUM Local	mikrotik	winbox	MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set. Keep Password is set …	CWE-522 Insufficiently Protected Credentials	CVE-2020-5721	2024-11-21 14:34	2020-04-16	Show	GitHub Exploit DB Packet Storm

198190	8.8	HIGH Network	grandstream	gxp1610_firmware gxp1615_firmware gxp1620_firmware gxp1625_firmware gxp1628_firmware gxp1630_firmware	Grandstream GXP1600 series firmware 1.0.4.152 and below is vulnerable to authenticated remote command execution when an attacker adds an OpenVPN up script to the phone's VPN settings via the "Additio…	CWE-94 Code Injection	CVE-2020-5739	2024-11-21 14:34	2020-04-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed