Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225481	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

225482	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

225483	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

225484	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

225485	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

225486	5.1	警告	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3573	2012-12-21 16:36	2010-10-12	Show	GitHub Exploit DB Packet Storm

225487	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Sound コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3572	2012-12-21 16:35	2010-10-12	Show	GitHub Exploit DB Packet Storm

225488	10	危険	サン・マイクロシステムズ VMware 日立ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の 2D コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3571	2012-12-21 16:31	2010-10-12	Show	GitHub Exploit DB Packet Storm

225489	7.6	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Deployment Toolkit コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3570	2012-12-21 16:30	2010-10-12	Show	GitHub Exploit DB Packet Storm

225490	10	危険	サン・マイクロシステムズ VMware ヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3569	2012-12-21 16:28	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198661	8.1	HIGH Network	pivotal_software	spring_batch	When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deseri…	CWE-502 Deserialization of Untrusted Data	CVE-2020-5411	2024-11-21 14:34	2020-06-12	Show	GitHub Exploit DB Packet Storm

198662	8.8	HIGH Network	zenphoto	zenphoto	Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.	CWE-94 Code Injection	CVE-2020-5593	2024-11-21 14:34	2020-06-11	Show	GitHub Exploit DB Packet Storm

198663	6.1	MEDIUM Network	zenphoto	zenphoto	Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2020-5592	2024-11-21 14:34	2020-06-11	Show	GitHub Exploit DB Packet Storm

198664	6.7	MEDIUM Local	dell	latitude_5300_firmware latitude_5300_2-in-1_firmware latitude_5400_firmware latitude_5401_firmware latitude_5500_firmware latitude_5501_firmware latitude_7200_2_in_1_firmware lat…	Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Ad…	NVD-CWE-Other	CVE-2020-5363	2024-11-21 14:34	2020-06-11	Show	GitHub Exploit DB Packet Storm

198665	8.8	HIGH Adjacent	sony	wf-1000x_firmware wf-sp700n_firmware wh-1000xm2_firmware wh-1000xm3_firmware wh-ch700n_firmware wh-h900n_firmware wh-xb700_firmware wh-xb900n_firmware wi-1000x_firmware wi-…	SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerabili…	CWE-306 Missing Authentication for Critical Function	CVE-2020-5589	2024-11-21 14:34	2020-06-9	Show	GitHub Exploit DB Packet Storm

198666	7.5	HIGH Network	xack	xack_dns	XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the …	CWE-674 Uncontrolled Recursion	CVE-2020-5591	2024-11-21 14:34	2020-06-6	Show	GitHub Exploit DB Packet Storm

198667	7.5	HIGH Network	vmware	spring_cloud_config	Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-co…	CWE-22 Path Traversal	CVE-2020-5410	2024-11-21 14:34	2020-06-3	Show	GitHub Exploit DB Packet Storm

198668	4.6	MEDIUM Physics	cybozu	kintone	Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors.	CWE-200 Information Exposure	CVE-2020-5573	2024-11-21 14:34	2020-05-29	Show	GitHub Exploit DB Packet Storm

198669	4.6	MEDIUM Physics	cybozu	mailwise	Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.	CWE-200 Information Exposure	CVE-2020-5572	2024-11-21 14:34	2020-05-29	Show	GitHub Exploit DB Packet Storm

198670	9.8	CRITICAL Network	cybozu	desktop	Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2020-5537	2024-11-21 14:34	2020-05-25	Show	GitHub Exploit DB Packet Storm