Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255871	6.8	警告	アドビシステムズレッドハット	-	UNIX 上で稼動する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2203	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

255872	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2202	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

255873	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2201	2010-07-21 16:27	2010-06-29	Show	GitHub Exploit DB Packet Storm

255874	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2168	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

255875	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1295	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

255876	9.3	危険	アドビシステムズレッドハット	-	Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 CWE-399	CVE-2010-1285	2010-07-20 18:08	2010-06-29	Show	GitHub Exploit DB Packet Storm

255877	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux Kernel の gfs2_lock または gfs_lock 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0727	2010-07-20 18:02	2010-03-16	Show	GitHub Exploit DB Packet Storm

255878	4.3	警告	サン・マイクロシステムズサイバートラスト株式会社 Pango.org レッドハット	-	Pango の hb_ot_layout_build_glyph_classes 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-0421	2010-07-20 18:01	2010-03-15	Show	GitHub Exploit DB Packet Storm

255879	4	警告	Samba Project アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスレッドハット	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2906	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

255880	1.9	注意	レッドハットサイバートラスト株式会社ターボリナックス Samba Project	-	Samba の mount.cifs における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2948	2010-07-20 18:01	2009-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211871	7.2	HIGH Network	rukovoditel	rukovoditel	Multiple exploitable SQL injection vulnerabilities exist in the 'entities/fields' page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An …	CWE-89 SQL Injection	CVE-2020-13590	2024-11-21 14:01	2022-04-19	Show	GitHub Exploit DB Packet Storm

211872	9.8	CRITICAL Network	open-emr phpgacl_project	openemr phpgacl	Multiple SQL injection vulnerabilities exist in phpGACL 3.3.7. A specially crafted HTTP request can lead to a SQL injection. An attacker can send an HTTP request to trigger this vulnerability.	CWE-89 SQL Injection	CVE-2020-13567	2024-11-21 14:01	2022-04-19	Show	GitHub Exploit DB Packet Storm

211873	5.5	MEDIUM Local	pixar	openusd	An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access th…	CWE-787 Out-of-bounds Write	CVE-2020-13495	2024-11-21 14:01	2022-04-19	Show	GitHub Exploit DB Packet Storm

211874	7.5	HIGH Network	drupal	drupal	Under some circumstances, the Drupal core JSON:API module does not properly restrict access to certain content, which may result in unintended access bypass. Sites that do not have the JSON:API modul…	NVD-CWE-Other	CVE-2020-13677	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

211875	6.5	MEDIUM Network	drupal	drupal	The QuickEdit module does not properly check access to fields in some circumstances, which can lead to unintended disclosure of field data. Sites are only affected if the QuickEdit module (which come…	CWE-863 Incorrect Authorization	CVE-2020-13676	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

211876	9.8	CRITICAL Network	drupal	drupal	Drupal's JSON:API and REST/File modules allow file uploads through their HTTP APIs. The modules do not correctly run all file validation, which causes an access bypass vulnerability. An attacker migh…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-13675	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

211877	6.5	MEDIUM Network	drupal	drupal	The QuickEdit module does not properly validate access to routes, which could allow cross-site request forgery under some circumstances and lead to possible data integrity issues. Sites are only affe…	CWE-352 Origin Validation Error	CVE-2020-13674	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

211878	6.1	MEDIUM Network	drupal	entity_embed	The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is ac…	CWE-79 Cross-site Scripting	CVE-2020-13673	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

211879	6.1	MEDIUM Network	drupal	drupal	Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions pr…	CWE-79 Cross-site Scripting	CVE-2020-13672	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

211880	7.5	HIGH Network	drupal	drupal	Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the I…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-13670	2024-11-21 14:01	2022-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed