Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255831	6.8	警告	IBM	-	IBM AIX および VIOS の sa_snap におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3405	2010-10-5 18:56	2010-08-6	Show	GitHub Exploit DB Packet Storm

255832	4.3	警告	有限会社のれんずプロ	-	AD-EDIT2 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2367	2010-10-5 11:02	2010-10-5	Show	GitHub Exploit DB Packet Storm

255833	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の ImageIO におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1817	2010-10-4 17:59	2010-09-8	Show	GitHub Exploit DB Packet Storm

255834	5.8	警告	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の FaceTime における通話をリダイレクトされる脆弱性	CWE-Other その他	CVE-2010-1810	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

255835	10	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の Accessibility コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-1809	2010-10-4 17:55	2010-09-8	Show	GitHub Exploit DB Packet Storm

255836	4	警告	ISC, Inc. IBM サイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカードレッドハット	-	BIND 9 の DNSSEC 検証処理における脆弱性	CWE-noinfo 情報不足	CVE-2009-4022	2010-10-1 17:39	2009-12-2	Show	GitHub Exploit DB Packet Storm

255837	4	警告	ISC, Inc. サイバートラスト株式会社ターボリナックスヒューレット・パッカードレッドハット	-	ISC BIND における DNS キャッシュ汚染の脆弱性	CWE-noinfo 情報不足	CVE-2010-0290	2010-10-1 17:39	2010-01-22	Show	GitHub Exploit DB Packet Storm

255838	7.6	危険	ISC, Inc. ヒューレット・パッカード	-	ISC BIND における処理範囲外のデータ処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0382	2010-10-1 17:38	2010-01-22	Show	GitHub Exploit DB Packet Storm

255839	9	危険	日立	-	Groupmax Scheduler Server における複数の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-6	Show	GitHub Exploit DB Packet Storm

255840	5.8	警告	富士通アクセラテクノロジ	-	Accela BizSearch の文書参照画面におけるフィッシング脅威の脆弱性	CWE-noinfo 情報不足	-	2010-10-1 17:37	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208471	7.5	HIGH Network	portfoliocms_project	portfoliocms	Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation.	CWE-287 Improper Authentication	CVE-2020-20402	2024-11-21 14:12	2023-02-1	Show	GitHub Exploit DB Packet Storm

208472	8.8	HIGH Network	ibarn_project	ibarn	File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-20588	2024-11-21 14:12	2022-12-16	Show	GitHub Exploit DB Packet Storm

208473	5.5	MEDIUM Local	artifex	mupdf	A Use After Free vulnerability in svg_dev_text_span_as_paths_defs function in source/fitz/svg-device.c in Artifex Software MuPDF 1.16.0 allows remote attackers to cause a denial of service via openin…	CWE-416 Use After Free	CVE-2020-21896	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208474	7.8	HIGH Local	artifex	ghostscript	Buffer Overflow vulnerability in clj_media_size function in devices/gdevclj.c in Artifex Ghostscript 9.50 allows remote attackers to cause a denial of service or other unspecified impact(s) via openi…	CWE-787 Out-of-bounds Write	CVE-2020-21890	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208475	5.5	MEDIUM Local	ogg_video_tools_project	ogg_video_tools	A Segmentation Fault issue discovered StreamSerializer::extractStreams function in streamSerializer.cpp in oggvideotools 0.9.1 allows remote attackers to cause a denial of service (crash) via opening…	NVD-CWE-noinfo	CVE-2020-21723	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208476	7.8	HIGH Local	ogg_video_tools_project	ogg_video_tools	Buffer Overflow vulnerability in oggvideotools 0.9.1 allows remote attackers to run arbitrary code via opening of crafted ogg file.	CWE-416 Use After Free	CVE-2020-21722	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208477	5.5	MEDIUM Local	artifex	ghostscript	A divide by zero issue discovered in eps_print_page in gdevepsn.c in Artifex Software GhostScript 9.50 allows remote attackers to cause a denial of service via opening of crafted PDF file.	CWE-369 Divide By Zero	CVE-2020-21710	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208478	7.5	HIGH Network	alibaba	tengine	The web server Tengine 2.2.2 developed in the Nginx version from 0.5.6 thru 1.13.2 is vulnerable to an integer overflow vulnerability in the nginx range filter module, resulting in the leakage of pot…	CWE-190 Integer Overflow or Wraparound	CVE-2020-21699	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208479	5.5	MEDIUM Local	nasm	netwide_assembler	Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file.	CWE-787 Out-of-bounds Write	CVE-2020-21687	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

208480	5.5	MEDIUM Local	nasm	netwide_assembler	A stack-use-after-scope issue discovered in expand_mmac_params function in preproc.c in nasm before 2.15.04 allows remote attackers to cause a denial of service via crafted asm file.	NVD-CWE-Other	CVE-2020-21686	2024-11-21 14:12	2023-08-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed