Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259031	4.3	警告	アップル	-	Apple Mac OS X の iChat におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1374	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

259032	4.3	警告	アップル	-	Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1373	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

259033	3.3	注意	アップル	-	Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0546	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

259034	4.4	警告	アップル	-	Apple Mac OS X の DesktopServices におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0545	2010-07-8 18:26	2010-06-15	Show	GitHub Exploit DB Packet Storm

259035	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

259036	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

259037	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

259038	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

259039	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

259040	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210871	5.5	MEDIUM Local	tengine_project	tengine	The serializer module in OAID Tengine lite-v1.0 has a Buffer Overflow and crash. NOTE: another person has stated "I don't think there is an proof of overflow so far.	CWE-120 Classic Buffer Overflow	CVE-2020-28759	2024-11-21 14:23	2020-12-27	Show	GitHub Exploit DB Packet Storm

210872	6.1	MEDIUM Network	litespeedtech	litespeed_cache	A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting.	CWE-79 Cross-site Scripting	CVE-2020-29172	2024-11-21 14:23	2020-12-26	Show	GitHub Exploit DB Packet Storm

210873	5.5	MEDIUM Local	gnome canonical fedoraproject	gdk-pixbuf ubuntu_linux fedora	GNOME gdk-pixbuf (aka GdkPixbuf) before 2.42.2 allows a denial of service (infinite loop) in lzw.c in the function write_indexes. if c->self_code equals 10, self->code_table[10].extends will assign t…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-29385	2024-11-21 14:23	2020-12-26	Show	GitHub Exploit DB Packet Storm

210874	4.8	MEDIUM Network	wondercms	wondercms	WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, …	CWE-79 Cross-site Scripting	CVE-2020-29247	2024-11-21 14:23	2020-12-25	Show	GitHub Exploit DB Packet Storm

210875	7.0	HIGH Local	mariadb	mariadb	With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the n…	NVD-CWE-Other	CVE-2020-28912	2024-11-21 14:23	2020-12-25	Show	GitHub Exploit DB Packet Storm

210876	8.1	HIGH Network	terra-master	tos	Incorrect Access Control vulnerability in TerraMaster TOS <= 4.2.06 allows remote authenticated attackers to bypass read-only restriction and obtain full access to any folder within the NAS	NVD-CWE-noinfo	CVE-2020-29189	2024-11-21 14:23	2020-12-25	Show	GitHub Exploit DB Packet Storm

210877	7.1	HIGH Local	malwarebytes	malwarebytes endpoint_protection	In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.	CWE-59 Link Following	CVE-2020-28641	2024-11-21 14:23	2020-12-23	Show	GitHub Exploit DB Packet Storm

210878	8.8	HIGH Network	odoo	odoo	A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows remote authenticated users to execute arbitrary code, leadi…	NVD-CWE-noinfo	CVE-2020-29396	2024-11-21 14:23	2020-12-23	Show	GitHub Exploit DB Packet Storm

210879	6.5	MEDIUM Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.…	CWE-611 XXE	CVE-2020-29436	2024-11-21 14:23	2020-12-17	Show	GitHub Exploit DB Packet Storm

210880	8.8	HIGH Network	epson	eps_tse_server_8_firmware	Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by…	CWE-352 Origin Validation Error	CVE-2020-28931	2024-11-21 14:23	2020-12-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed