Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258311	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3655	2010-11-17 16:49	2010-10-28	Show	GitHub Exploit DB Packet Storm

258312	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の TextXtra.x32 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2582	2010-11-17 16:49	2010-10-28	Show	GitHub Exploit DB Packet Storm

258313	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player の dirapi.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2581	2010-11-17 16:48	2010-10-28	Show	GitHub Exploit DB Packet Storm

258314	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player に脆弱性	CWE-119 バッファエラー	CVE-2010-3653	2010-11-16 14:49	2010-10-25	Show	GitHub Exploit DB Packet Storm

258315	7.5	危険	富士通	-	Interstage Application Server におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-6258	2010-11-16 14:48	2008-02-19	Show	GitHub Exploit DB Packet Storm

258316	6.5	警告	アップルサイバートラスト株式会社 MySQL AB ターボリナックスレッドハット	-	MySQL におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1848	2010-11-15 16:20	2010-05-5	Show	GitHub Exploit DB Packet Storm

258317	5	警告	サイバートラスト株式会社 Zabbix	-	Zabbix サーバの trapper/trapper.c 内にある process_trap 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-4500	2010-11-15 15:41	2009-07-21	Show	GitHub Exploit DB Packet Storm

258318	9.3	危険	サイバートラスト株式会社 Zabbix	-	Zabbix Agent の net.c 内にある NET_TCP_LISTEN 関数における任意のコマンドを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4502	2010-11-15 15:41	2009-09-10	Show	GitHub Exploit DB Packet Storm

258319	5	警告	サイバートラスト株式会社 Zabbix	-	Zabbix サーバの zbx_get_next_field 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-4501	2010-11-15 15:40	2009-11-25	Show	GitHub Exploit DB Packet Storm

258320	7.5	危険	サイバートラスト株式会社 Zabbix	-	Zabbix サーバの get_history_lastid 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4499	2010-11-15 15:40	2009-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195761	7.5	HIGH Network	debian	courier-authlib debian_linux	The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information.…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2021-28374	2024-11-21 14:59	2021-03-15	Show	GitHub Exploit DB Packet Storm

195762	7.5	HIGH Network	tt-rss	tiny_tiny_rss	The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch f…	CWE-863 Incorrect Authorization	CVE-2021-28373	2024-11-21 14:59	2021-03-14	Show	GitHub Exploit DB Packet Storm

195763	7.5	HIGH Network	spdk	storage_performance_development_kit	An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with …	CWE-476 NULL Pointer Dereference	CVE-2021-28361	2024-11-21 14:59	2021-03-14	Show	GitHub Exploit DB Packet Storm

195764	6.1	MEDIUM Network	eclipse	theia	In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run.	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2021-28162	2024-11-21 14:59	2021-03-13	Show	GitHub Exploit DB Packet Storm

195765	6.1	MEDIUM Network	eclipse	theia	In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected.	CWE-79 Cross-site Scripting	CVE-2021-28161	2024-11-21 14:59	2021-03-13	Show	GitHub Exploit DB Packet Storm

195766	7.5	HIGH Network	is-svg_project	is-svg	The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg wil…	CWE-1333 Inefficient Regular Expression Complexity	CVE-2021-28092	2024-11-21 14:59	2021-03-13	Show	GitHub Exploit DB Packet Storm

195767	7.5	HIGH Network	pupnp_project	pupnp	A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2021-28302	2024-11-21 14:59	2021-03-13	Show	GitHub Exploit DB Packet Storm

195768	9.1	CRITICAL Network	fltk_project	fltk	An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation.	CWE-125 Out-of-bounds Read	CVE-2021-28308	2024-11-21 14:59	2021-03-12	Show	GitHub Exploit DB Packet Storm

195769	7.5	HIGH Network	fltk_project	fltk	An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon.	CWE-476 NULL Pointer Dereference	CVE-2021-28307	2024-11-21 14:59	2021-03-12	Show	GitHub Exploit DB Packet Storm

195770	7.5	HIGH Network	fltk_project	fltk	An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent.	CWE-476 NULL Pointer Dereference	CVE-2021-28306	2024-11-21 14:59	2021-03-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed