Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258441	9.3	危険	アドビシステムズ	-	Apple Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3623	2010-10-20 14:37	2010-10-5	Show	GitHub Exploit DB Packet Storm

258442	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3622	2010-10-20 14:37	2010-10-5	Show	GitHub Exploit DB Packet Storm

258443	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3621	2010-10-20 14:37	2010-10-5	Show	GitHub Exploit DB Packet Storm

258444	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3620	2010-10-20 14:37	2010-10-5	Show	GitHub Exploit DB Packet Storm

258445	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3619	2010-10-20 14:36	2010-10-5	Show	GitHub Exploit DB Packet Storm

258446	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-2890	2010-10-20 14:36	2010-10-5	Show	GitHub Exploit DB Packet Storm

258447	9.3	危険	アドビシステムズレッドハット	-	Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2889	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

258448	9.3	危険	アドビシステムズ	-	Windows 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2888	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

258449	9.3	危険	アドビシステムズレッドハット	-	Linux 上で稼働する Adobe Reader および Acrobat における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-2887	2010-10-20 14:35	2010-10-5	Show	GitHub Exploit DB Packet Storm

258450	6.8	警告	pon software	-	Archive Decoder における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3160	2010-10-20 14:03	2010-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218141	5.4	MEDIUM Network	salesagility	suitecrm	SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script …	CWE-79 Cross-site Scripting	CVE-2020-14208	2024-11-21 14:02	2020-11-19	Show	GitHub Exploit DB Packet Storm

218142	7.8	HIGH Local	apache	openoffice	A vulnerability in Apache OpenOffice scripting events allows an attacker to construct documents containing hyperlinks pointing to an executable on the target users file system. These hyperlinks can b…	NVD-CWE-noinfo	CVE-2020-13958	2024-11-21 14:02	2020-11-18	Show	GitHub Exploit DB Packet Storm

218143	9.8	CRITICAL Network	resourcexpress	meeting_monitor	SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure.	CWE-89 SQL Injection	CVE-2020-13877	2024-11-21 14:02	2020-11-13	Show	GitHub Exploit DB Packet Storm

218144	6.1	MEDIUM Network	apache netapp oracle	cxf snap_creator_framework vasa_provider_for_clustered_data_ontap retail_order_broker_cloud_service business_intelligence communications_messaging_server	By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the…	CWE-79 Cross-site Scripting	CVE-2020-13954	2024-11-21 14:02	2020-11-12	Show	GitHub Exploit DB Packet Storm

218145	9.8	CRITICAL Network	atlassian	jira_comment	The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially …	NVD-CWE-noinfo	CVE-2020-14189	2024-11-21 14:02	2020-11-10	Show	GitHub Exploit DB Packet Storm

218146	9.8	CRITICAL Network	atlassian	jira_create	The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a special…	NVD-CWE-noinfo	CVE-2020-14188	2024-11-21 14:02	2020-11-10	Show	GitHub Exploit DB Packet Storm

218147	6.1	MEDIUM Network	hcltech	notes	HCL Notes versions previous to releases 9.0.1 FP10 IF8, 10.0.1 FP6 and 11.0.1 FP1 is susceptible to a Stored Cross-site Scripting (XSS) vulnerability. An attacker could use this vulnerability to exec…	CWE-79 Cross-site Scripting	CVE-2020-14240	2024-11-21 14:02	2020-11-6	Show	GitHub Exploit DB Packet Storm

218148	6.1	MEDIUM Network	hcltech	hcl_digital_experience	HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross site scripting (XSS). One subcomponent is vulnerable to reflected XSS. In reflected XSS, an attacker must induce a victim to click on a cr…	CWE-79 Cross-site Scripting	CVE-2020-14222	2024-11-21 14:02	2020-11-6	Show	GitHub Exploit DB Packet Storm

218149	5.3	MEDIUM Network	apache	kylin	Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, …	CWE-922 Insecure Storage of Sensitive Information	CVE-2020-13937	2024-11-21 14:02	2020-10-20	Show	GitHub Exploit DB Packet Storm

218150	5.4	MEDIUM Network	sage	easypay	Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web script or HTML via multiple parameters through Unicode Trans…	CWE-79 Cross-site Scripting	CVE-2020-13893	2024-11-21 14:02	2020-10-19	Show	GitHub Exploit DB Packet Storm