Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258401	9.3	危険	Opera Software ASA	-	Opera におけるパスワード入力時のキーボードハンドリングの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2008-1764	2010-09-27 15:59	2008-04-12	Show	GitHub Exploit DB Packet Storm

258402	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2008-1762	2010-09-27 15:58	2008-04-12	Show	GitHub Exploit DB Packet Storm

258403	9.3	危険	Opera Software ASA	-	Opera における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2008-1761	2010-09-27 15:58	2008-04-12	Show	GitHub Exploit DB Packet Storm

258404	4.3	警告	Opera Software ASA	-	Opera におけるクロスサイトスクリプティングを誘導される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-1082	2010-09-27 15:57	2008-02-29	Show	GitHub Exploit DB Packet Storm

258405	6.8	警告	Opera Software ASA	-	Opera における任意のスクリプトを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2008-1081	2010-09-27 15:57	2008-02-29	Show	GitHub Exploit DB Packet Storm

258406	6.8	警告	Opera Software ASA	-	Opera における任意のファイルを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2008-1080	2010-09-27 15:55	2008-02-29	Show	GitHub Exploit DB Packet Storm

258407	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer におけるファイルのアクセス制限を回避される脆弱性	CWE-noinfo 情報不足	CVE-2010-3002	2010-09-21 14:11	2010-08-26	Show	GitHub Exploit DB Packet Storm

258408	9.3	危険	リアルネットワークス	-	Windows 上で稼働する RealNetworks RealPlayer の ParseKnownType 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3000	2010-09-21 14:11	2010-08-26	Show	GitHub Exploit DB Packet Storm

258409	9.3	危険	リアルネットワークス	-	Windows 上で稼働する RealNetworks RealPlayer の Internet Explorer プラグインにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3001	2010-09-21 14:11	2010-08-26	Show	GitHub Exploit DB Packet Storm

258410	9.3	危険	リアルネットワークス	-	Windows 上で稼働する RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2996	2010-09-21 14:10	2010-08-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211201	7.5	HIGH Network	gorillatoolkit debian	websocket debian_linux	An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server…	CWE-190 CWE-400 Integer Overflow or Wraparound Uncontrolled Resource Consumption	CVE-2020-27813	2024-11-21 14:21	2020-12-2	Show	GitHub Exploit DB Packet Storm

211202	6.7	MEDIUM Local	quickheal	total_security	Quick Heal Total Security before 19.0 allows attackers with local admin rights to obtain access to files in the File Vault via a brute-force attack on the password.	CWE-521 Weak Password Requirements	CVE-2020-27587	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

211203	5.9	MEDIUM Network	quickheal	total_security	Quick Heal Total Security before version 19.0 transmits quarantine and sysinfo files via clear text.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27586	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

211204	4.4	MEDIUM Local	quickheal	total_security	Quick Heal Total Security before 19.0 allows attackers with local admin rights to modify sensitive anti virus settings via a brute-attack on the settings password.	CWE-521 Weak Password Requirements	CVE-2020-27585	2024-11-21 14:21	2020-12-1	Show	GitHub Exploit DB Packet Storm

211205	9.8	CRITICAL Network	synology	safeaccess	SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter.	CWE-89 SQL Injection	CVE-2020-27660	2024-11-21 14:21	2020-11-30	Show	GitHub Exploit DB Packet Storm

211206	4.8	MEDIUM Network	synology	safeaccess	Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter.	CWE-79 Cross-site Scripting	CVE-2020-27659	2024-11-21 14:21	2020-11-30	Show	GitHub Exploit DB Packet Storm

211207	3.7	LOW Network	schedmd debian	slurm debian_linux	Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /pro…	CWE-362 Race Condition	CVE-2020-27746	2024-11-21 14:21	2020-11-28	Show	GitHub Exploit DB Packet Storm

211208	9.8	CRITICAL Network	schedmd debian	slurm debian_linux	Slurm before 19.05.8 and 20.x before 20.02.6 has an RPC Buffer Overflow in the PMIx MPI plugin.	CWE-120 Classic Buffer Overflow	CVE-2020-27745	2024-11-21 14:21	2020-11-28	Show	GitHub Exploit DB Packet Storm

211209	4.3	MEDIUM Network	glpi-project	glpi	In GLPI before 9.5.3, ajax/getDropdownValue.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any itemType (e.g., Ticket, Users, etc.).	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-27663	2024-11-21 14:21	2020-11-27	Show	GitHub Exploit DB Packet Storm

211210	4.3	MEDIUM Network	glpi-project	glpi	In GLPI before 9.5.3, ajax/comments.php has an Insecure Direct Object Reference (IDOR) vulnerability that allows an attacker to read data from any database table (e.g., glpi_tickets, glpi_users, etc.…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-27662	2024-11-21 14:21	2020-11-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed