Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256131	4	警告	アップル MIT Kerberos	-	MIT Kerberos 5 の Key Distribution Center における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1320	2010-07-9 16:25	2010-04-20	Show	GitHub Exploit DB Packet Storm

256132	6.8	警告	アップル	-	Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0543	2010-07-9 16:24	2010-06-15	Show	GitHub Exploit DB Packet Storm

256133	4.3	警告	アップル	-	Apple Mac OS X の iChat におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1374	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

256134	4.3	警告	アップル	-	Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1373	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

256135	3.3	注意	アップル	-	Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0546	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

256136	4.4	警告	アップル	-	Apple Mac OS X の DesktopServices におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0545	2010-07-8 18:26	2010-06-15	Show	GitHub Exploit DB Packet Storm

256137	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

256138	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

256139	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

256140	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198261	8.8	HIGH Adjacent	adt	lifeshield_diy_hd_video_doorbell_firmware	Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to e…	CWE-77 Command Injection	CVE-2020-8101	2024-11-21 14:38	2021-02-2	Show	GitHub Exploit DB Packet Storm

198262	7.5	HIGH Network	nextcloud	nextcloud_server	A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8295	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

198263	6.5	MEDIUM Network	nextcloud	nextcloud_server	A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage wi…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8293	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

198264	5.4	MEDIUM Network	rocket.chat	rocket.chat	Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes.	CWE-79 Cross-site Scripting	CVE-2020-8292	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

198265	5.4	MEDIUM Network	rocket.chat	rocket.chat	The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter.	CWE-79 Cross-site Scripting	CVE-2020-8288	2024-11-21 14:38	2021-01-27	Show	GitHub Exploit DB Packet Storm

198266	6.5	MEDIUM Network	nodejs debian fedoraproject oracle siemens	node.js debian_linux fedora graalvm sinec_infrastructure_network_services	Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies th…	CWE-444 HTTP Request Smuggling	CVE-2020-8287	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

198267	5.4	MEDIUM Network	nextcloud	contacts	A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2020-8281	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

198268	5.4	MEDIUM Network	nextcloud	contacts	A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks.	CWE-79 Cross-site Scripting	CVE-2020-8280	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

198269	4.3	MEDIUM Network	citrix	secure_mail	Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicio…	CWE-269 Improper Privilege Management	CVE-2020-8275	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

198270	6.5	MEDIUM Network	citrix	secure_mail	Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note th…	CWE-94 Code Injection	CVE-2020-8274	2024-11-21 14:38	2021-01-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed