Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253941 10 危険 リアルネットワークス - RealNetworks RealPlayer の AAC スペクトルデータの解析処理における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0125 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
253942 5 警告 リアルネットワークス - RealNetworks RealPlayer の cook コーデックにおける任意のメモリへアクセスされる脆弱性 CWE-Other
その他
CVE-2010-2579 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
253943 10 危険 リアルネットワークス - RealNetworks RealPlayer の cook コーデックにおける脆弱性 CWE-Other
その他
CVE-2010-0121 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
253944 9.3 危険 レッドハット
リアルネットワークス
- RealNetworks RealPlayer の drv2.dll モジュールにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4378 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
253945 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の Cook Audio Codec におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4377 2011-01-7 15:35 2010-12-10 Show GitHub Exploit DB Packet Storm
253946 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の RTSP GIF の解析処理におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4376 2011-01-7 15:34 2010-12-10 Show GitHub Exploit DB Packet Storm
253947 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の pnen3260.dll モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4397 2011-01-7 15:34 2010-12-10 Show GitHub Exploit DB Packet Storm
253948 9.3 危険 リアルネットワークス - RealNetworks RealPlayer の AAC MLLT Atom 解析処理における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-2999 2011-01-7 15:34 2010-12-10 Show GitHub Exploit DB Packet Storm
253949 9.3 危険 レッドハット
リアルネットワークス
- RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-2997 2011-01-7 15:33 2010-12-10 Show GitHub Exploit DB Packet Storm
253950 2.6 注意 アップル
サイバートラスト株式会社
レッドハット
SquirrelMail Project
- SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-2964 2011-01-7 11:03 2009-08-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5021 9.8 CRITICAL
Network
- - A security vulnerability has been detected in Totolink A8000RU 7.1cu.643_b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipula… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7137 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5022 9.8 CRITICAL
Network
- - A vulnerability was detected in Totolink A8000RU 7.1cu.643_b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7138 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5023 4.3 MEDIUM
Network
- - An open redirect in the /api/google/authorize endpoint of hunvreus DevPush v0.3.2 allows attackers to redirect users to malicious sites via supplying a crafted URL. CWE-601
Open Redirect
CVE-2026-30346 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5024 4.3 MEDIUM
Network
- - A path traversal vulnerability in the Blocks module of Daylight Studio FuelCMS v1.5.2 allows attackers to execute a directory traversal. CWE-22
Path Traversal
CVE-2026-30462 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5025 8.8 HIGH
Network
- - Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/setting… CWE-352
 Origin Validation Error
CVE-2026-38934 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5026 6.1 MEDIUM
Network
- - A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/view.php via the doctype parameter CWE-79
Cross-site Scripting
CVE-2026-38935 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5027 6.1 MEDIUM
Network
- - A reflected cross-site scripting (XSS) vulnerability exists in diskover-community <= 2.3.5 in public/selectindices.php via the namecontains parameter CWE-79
Cross-site Scripting
CVE-2026-38936 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5028 9.8 CRITICAL
Network
- - A flaw has been found in Totolink A8000RU 7.1cu.643_b20200521. This issue affects the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. This manipulation of the … CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7139 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5029 9.8 CRITICAL
Network
- - A vulnerability has been found in Totolink A8000RU 7.1cu.643_b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the arg… CWE-77
CWE-78
Command Injection
OS Command 
CVE-2026-7140 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm
5030 5.4 MEDIUM
Network
- - A weakness has been identified in mettle sendportal up to 3.0.1. Affected is the function destroy of the file app/Http/Controllers/Workspaces/WorkspaceInvitationsController.php of the component Invit… CWE-285
CWE-639
Improper Authorization
 Authorization Bypass Through User-Controlled Key
CVE-2026-7145 2026-04-28 03:35 2026-04-28 Show GitHub Exploit DB Packet Storm