Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256761	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0987	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

256762	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0986	2010-05-31 18:26	2010-05-11	Show	GitHub Exploit DB Packet Storm

256763	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0130	2010-05-28 18:44	2010-05-11	Show	GitHub Exploit DB Packet Storm

256764	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0129	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

256765	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player および Adobe Director における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-0128	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

256766	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0127	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

256767	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0815	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

256768	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0816	2010-05-28 18:43	2010-05-11	Show	GitHub Exploit DB Packet Storm

256769	9.3	危険	日立	-	複数の日立製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4776	2010-05-28 18:42	2009-07-21	Show	GitHub Exploit DB Packet Storm

256770	6.8	警告	サイバートラスト株式会社レッドハット	-	TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0827	2010-05-27 17:40	2010-05-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212281	5.4	MEDIUM Network	munkireport_project	comment	A Cross-Site Scripting (XSS) vulnerability in the comment module before 4.0 for MunkiReport allows remote attackers to inject arbitrary web script or HTML by posting a new comment.	CWE-79 Cross-site Scripting	CVE-2020-15885	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212282	8.8	HIGH Network	munkireport_project	munkireport	A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order[0][dir] field on POST requests to /datatables/data.	CWE-89 SQL Injection	CVE-2020-15884	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212283	6.1	MEDIUM Network	managedinstalls_project	managedinstalls	A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (thr…	CWE-79 Cross-site Scripting	CVE-2020-15883	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212284	8.1	HIGH Network	munkireport_project	munkireport	A CSRF issue in manager/delete_machine/{id} in MunkiReport before 5.6.3 allows attackers to delete arbitrary machines from the MunkiReport database.	CWE-352 Origin Validation Error	CVE-2020-15882	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212285	6.1	MEDIUM Network	munki_facts_project	munki_facts	A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name.	CWE-79 Cross-site Scripting	CVE-2020-15881	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212286	8.8	HIGH Network	embedthis	goahead	The HTTP Digest Authentication in the GoAhead web server before 5.1.2 does not completely protect against replay attacks. This allows an unauthenticated remote attacker to bypass authentication via c…	CWE-294 Authentication Bypass by Capture-replay	CVE-2020-15688	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212287	7.5	HIGH Network	cauldrondevelopment	c\!	tar/TarFileReader.cpp in Cauldron cbang (aka C-Bang or C!) before 1.6.0 allows Directory Traversal during extraction from a TAR archive.	CWE-22 Path Traversal	CVE-2020-15908	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212288	7.8	HIGH Local	pypi	bsdiff4	A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.	CWE-787 Out-of-bounds Write	CVE-2020-15904	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212289	6.1	MEDIUM Network	nagios	nagios_xi	Graph Explorer in Nagios XI before 5.7.2 allows XSS via the link url option.	CWE-79 Cross-site Scripting	CVE-2020-15902	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

212290	8.8	HIGH Network	nagios	nagios_xi	In Nagios XI before 5.7.3, ajaxhelper.php allows remote authenticated attackers to execute arbitrary commands via cmdsubsys.	NVD-CWE-noinfo	CVE-2020-15901	2024-11-21 14:06	2020-07-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed