Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255381	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0127	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

255382	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0815	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

255383	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0816	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

255384	9.3	危険	日立	-	複数の日立製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4776	2010-05-28 18:42	2009-07-21	Show	GitHub Exploit DB Packet Storm

255385	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0827	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

255386	6.8	警告	サイバートラスト株式会社レッドハット	-	teTeX および TeXlive 2007 の hpc.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2007-5935	2010-05-27 17:40	2007-11-13	Show	GitHub Exploit DB Packet Storm

255387	4.3	警告	サイバートラスト株式会社レッドハット	-	dvipng および teTeX の set.c における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0829	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

255388	1.9	注意	IBM	-	IBM WebSphere Application Server における KeyRingPassword のパスワード情報が漏えいする脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0769	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

255389	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0768	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

255390	4	警告	IBM	-	IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0770	2010-05-27 17:25	2010-04-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197601	7.5	HIGH Network	nextcloud	nextcloud_server	A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8295	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

197602	6.5	MEDIUM Network	nextcloud	nextcloud_server	A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage wi…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8293	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

197603	5.4	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.	CWE-79 Cross-site Scripting	CVE-2020-8292	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

197604	5.4	MEDIUM Network	rocket.chat	rocket.chat	The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.	CWE-79 Cross-site Scripting	CVE-2020-8288	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

197605	6.5	MEDIUM Network	nodejs debian fedoraproject oracle siemens	node.js debian_linux fedora graalvm sinec_infrastructure_network_services	Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies th…	CWE-444 HTTP Request Smuggling	CVE-2020-8287	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

197606	5.4	MEDIUM Network	nextcloud	contacts	A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2020-8281	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

197607	5.4	MEDIUM Network	nextcloud	contacts	A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2020-8280	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

197608	4.3	MEDIUM Network	citrix	secure_mail	Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicio…	CWE-269 Improper Privilege Management	CVE-2020-8275	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

197609	6.5	MEDIUM Network	citrix	secure_mail	Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note th…	CWE-94 Code Injection	CVE-2020-8274	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

197610	6.1	MEDIUM Network	rubyonrails	rails	In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL whic…	CWE-79 Cross-site Scripting	CVE-2020-8264	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed