Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255201 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255202 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255203 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255204 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255205 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255206 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255207 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255208 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255209 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255210 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200931 9.8 CRITICAL
Network 		huorong internet_security Beijing Huorong Internet Security 5.0.55.2 allows a non-admin user to escalate privileges by injecting code into a process, and then waiting for a Huorong services restart or a system reboot. NVD-CWE-noinfo
CVE-2020-35364 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
200932 7.5 HIGH
Network 		dext5 dext5upload DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5CMD=downloadRequest action with traversal… CWE-22
Path Traversal 		CVE-2020-35362 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200933 7.5 HIGH
Network 		flamingoim_project flamingoim Flamingo (aka FlamingoIM) through 2020-09-29 allows ../ directory traversal because the only ostensibly unpredictable part of a file-transfer request is an MD5 computation; however, this computation … CWE-22
Path Traversal 		CVE-2020-35284 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200934 7.5 HIGH
Network 		gobby_project gobby Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls. CWE-476
 NULL Pointer Dereference 		CVE-2020-35450 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200935 7.5 HIGH
Network 		pureftpd pure-ftpd Pure-FTPd 1.0.48 allows remote attackers to prevent legitimate server use by making enough connections to exceed the connection limit. CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-35359 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200936 6.1 MEDIUM
Network 		intelliants subrion_cms Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI. CWE-79
Cross-site Scripting 		CVE-2020-35437 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200937 7.5 HIGH
Network 		xpdfreader
fedoraproject 		xpdf
fedora 		Xpdf 4.02 allows stack consumption because of an incorrect subroutine reference in a Type 1C font charstring, related to the FoFiType1C::getOp() function. CWE-787
 Out-of-bounds Write 		CVE-2020-35376 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200938 4.8 MEDIUM
Network 		techkshetrainfo savsoft_quiz Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page). CWE-79
Cross-site Scripting 		CVE-2020-35349 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200939 6.5 MEDIUM
Network 		cxuu cxuucms CXUUCMS V3 3.1 has a CSRF vulnerability that can add an administrator account via admin.php?c=adminuser&a=add. CWE-352
 Origin Validation Error 		CVE-2020-35347 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm
200940 4.8 MEDIUM
Network 		cxuu cxuucms CXUUCMS V3 3.1 is affected by a reflected XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of admin.php?c=content&a=add. CWE-79
Cross-site Scripting 		CVE-2020-35346 2024-11-21 14:27 2020-12-26 Show GitHub Exploit DB Packet Storm