Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258081 9.3 危険 アドビシステムズ - Adobe Shockwave Player に脆弱性 CWE-119
バッファエラー 		CVE-2010-3653 2010-11-16 14:49 2010-10-25 Show GitHub Exploit DB Packet Storm
258082 7.5 危険 富士通 - Interstage Application Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6258 2010-11-16 14:48 2008-02-19 Show GitHub Exploit DB Packet Storm
258083 6.5 警告 アップル
サイバートラスト株式会社
MySQL AB
ターボリナックス
レッドハット		 - MySQL におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1848 2010-11-15 16:20 2010-05-5 Show GitHub Exploit DB Packet Storm
258084 5 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4500 2010-11-15 15:41 2009-07-21 Show GitHub Exploit DB Packet Storm
258085 9.3 危険 サイバートラスト株式会社
Zabbix		 - Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4502 2010-11-15 15:41 2009-09-10 Show GitHub Exploit DB Packet Storm
258086 5 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの zbx_get_next_field 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-4501 2010-11-15 15:40 2009-11-25 Show GitHub Exploit DB Packet Storm
258087 7.5 危険 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4499 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
258088 6.8 警告 サイバートラスト株式会社
Zabbix		 - Zabbix サーバの node_process_command 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2009-4498 2010-11-15 15:40 2009-09-10 Show GitHub Exploit DB Packet Storm
258089 6.9 警告 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における権限昇格の脆弱性 CWE-Other
その他 		CVE-2010-3181 2010-11-11 15:07 2010-10-19 Show GitHub Exploit DB Packet Storm
258090 9.3 危険 アドビシステムズ - 複数の Adobe 製品における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3153 2010-11-10 15:34 2010-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210911 9.8 CRITICAL
Network 		exodus field Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28269 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
210912 5.3 MEDIUM
Network 		lettre lettre The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs. NVD-CWE-noinfo
CVE-2020-28247 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
210913 5.4 MEDIUM
Network 		dundas dundas_bi The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur. CWE-79
Cross-site Scripting 		CVE-2020-28409 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
210914 5.4 MEDIUM
Network 		dundas dundas_bi The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. CWE-79
Cross-site Scripting 		CVE-2020-28408 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
210915 4.4 MEDIUM
Local 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Pl… CWE-862
 Missing Authorization 		CVE-2020-28368 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
210916 7.8 HIGH
Local 		tcl 32s330_firmware
40s330_firmware
43s434_firmware
50s434_firmware
55s434_firmware
65s434_firmware
75s434_firmware 		A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a … CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-28055 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
210917 7.5 HIGH
Network 		set_project set Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution. NVD-CWE-noinfo
CVE-2020-28267 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
210918 8.8 HIGH
Adjacent 		netgear r6400v2_firmware
r6400_firmware
r7000p_firmware
xr300_firmware
r8000_firmware
r8300_firmware
r8500_firmware
r7300dst_firmware
r7850_firmware
r7900_firmware
rax20_firmwar… 		upnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0.4.102_10.0.75, R6400 V1.0.1.62_1.0.41, R7000P V1.… CWE-787
 Out-of-bounds Write 		CVE-2020-28373 2024-11-21 14:22 2020-11-10 Show GitHub Exploit DB Packet Storm
210919 9.8 CRITICAL
Network 		readytalk avian An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStream.java has a boundary check to prevent out-of-bounds memory read/write operat… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-28371 2024-11-21 14:22 2020-11-10 Show GitHub Exploit DB Packet Storm
210920 6.1 MEDIUM
Network 		locust locust A stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users. CWE-79
Cross-site Scripting 		CVE-2020-28364 2024-11-21 14:22 2020-11-10 Show GitHub Exploit DB Packet Storm