Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256321 9.3 危険 アドビシステムズ - Adobe Shockwave Player の IML32.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2881 2010-09-13 15:46 2010-08-24 Show GitHub Exploit DB Packet Storm
256322 9.3 危険 アドビシステムズ - Adobe Shockwave Player の DIRAPI.dll における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2880 2010-09-13 15:45 2010-08-24 Show GitHub Exploit DB Packet Storm
256323 9.3 危険 アドビシステムズ - Adobe Shockwave Player の TextXtra.x32 モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2879 2010-09-13 15:45 2010-08-24 Show GitHub Exploit DB Packet Storm
256324 9.3 危険 アドビシステムズ - Adobe Shockwave Player の DIRAPIX.dll における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2878 2010-09-13 15:45 2010-08-24 Show GitHub Exploit DB Packet Storm
256325 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2877 2010-09-13 15:45 2010-08-24 Show GitHub Exploit DB Packet Storm
256326 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2876 2010-09-13 15:44 2010-08-24 Show GitHub Exploit DB Packet Storm
256327 9.3 危険 アドビシステムズ - Adobe Shockwave Player における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-2875 2010-09-13 15:44 2010-08-24 Show GitHub Exploit DB Packet Storm
256328 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2874 2010-09-13 15:44 2010-08-24 Show GitHub Exploit DB Packet Storm
256329 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2873 2010-09-13 15:43 2010-08-24 Show GitHub Exploit DB Packet Storm
256330 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2872 2010-09-10 15:17 2010-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208031 6.1 MEDIUM
Network 		seacms seacms A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting 		CVE-2020-26642 2024-11-21 14:20 2021-05-29 Show GitHub Exploit DB Packet Storm
208032 8.8 HIGH
Network 		idreamsoft icms A Cross Site Request Forgery (CSRF) vulnerability was discovered in iCMS 7.0.16 which can allow an attacker to execute arbitrary web scripts. CWE-352
 Origin Validation Error 		CVE-2020-26641 2024-11-21 14:20 2021-05-29 Show GitHub Exploit DB Packet Storm
208033 5.4 MEDIUM
Network 		vfairs vfairs In vFairs 3.3, any user logged in to a vFairs virtual conference or event can modify any other users profile information to include a cross-site scripting payload. The user data stored by the databas… CWE-79
Cross-site Scripting 		CVE-2020-26680 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208034 4.3 MEDIUM
Network 		vfairs vfairs vFairs 3.3 is affected by Insecure Permissions. Any user logged in to a vFairs virtual conference or event can modify any other users profile information or profile picture. After receiving any user'… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-26679 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208035 8.8 HIGH
Network 		vfairs vfairs vFairs 3.3 is affected by Remote Code Execution. Any user logged in to a vFairs virtual conference or event can abuse the functionality to upload a profile picture in order to place a malicious PHP f… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26678 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208036 8.8 HIGH
Network 		vfairs vfairs Any user logged in to a vFairs 3.3 virtual conference or event can perform SQL injection with a malicious query to the API. CWE-89
SQL Injection 		CVE-2020-26677 2024-11-21 14:20 2021-05-26 Show GitHub Exploit DB Packet Storm
208037 8.1 HIGH
Adjacent 		bluetooth mesh_profile Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without posse… CWE-863
 Incorrect Authorization 		CVE-2020-26560 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208038 8.8 HIGH
Adjacent 		bluetooth mesh_profile Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (participating in the provisioning protocol) to identify the AuthValue used given the Provisioner’s … CWE-863
 Incorrect Authorization 		CVE-2020-26559 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208039 4.2 MEDIUM
Adjacent 		bluetooth
fedoraproject
debian
linux
intel 		bluetooth_core_specification
fedora
debian_linux
linux_kernel
ax210_firmware
ax201_firmware
ax200_firmware
ac_9560_firmware
ac_9462_firmware
ac_9461_firmware
ac_9260_fir… 		Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 through 5.2 may permit a nearby man-in-the-middle attacker to identify the Passkey used during pairing (in the Passkey authe… CWE-287
Improper Authentication 		CVE-2020-26558 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm
208040 7.5 HIGH
Adjacent 		bluetooth mesh_profile Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device (without possession of the AuthValue used in the provisioning protocol) to determine the AuthValue via a brute… CWE-287
Improper Authentication 		CVE-2020-26557 2024-11-21 14:20 2021-05-25 Show GitHub Exploit DB Packet Storm