Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225891 7.5 危険 SPIP - SPIP におけるインストールなどに関する許可されていない操作を実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3041 2012-12-20 19:28 2009-08-6 Show GitHub Exploit DB Packet Storm
225892 9.3 危険 シマンテック - Symantec Altiris Deployment Solution などの Web コンソールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3033 2012-12-20 19:28 2009-11-24 Show GitHub Exploit DB Packet Storm
225893 9.3 危険 シマンテック - Symantec Altiris Deployment Solution などの BrowseAndSaveFile メソッドにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-3031 2012-12-20 19:28 2009-11-2 Show GitHub Exploit DB Packet Storm
225894 4.3 警告 シマンテック - Symantec SecurityExpressions Audit および Compliance Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3030 2012-12-20 19:28 2009-10-6 Show GitHub Exploit DB Packet Storm
225895 3.5 注意 シマンテック - SecurityExpressions Audit および Compliance Server のコンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3029 2012-12-20 19:28 2009-10-6 Show GitHub Exploit DB Packet Storm
225896 4.3 警告 Pidgin - Pidgin におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-3025 2012-12-20 19:28 2009-08-31 Show GitHub Exploit DB Packet Storm
225897 4.3 警告 QtWeb.NET - QtWeb におけるクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3015 2012-12-20 19:28 2009-08-31 Show GitHub Exploit DB Packet Storm
225898 4.3 警告 RADVISION - Radvision Scopia の entry/index.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2965 2012-12-20 19:28 2009-08-25 Show GitHub Exploit DB Packet Storm
225899 4.3 警告 xapian - Xapian Omega におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-2947 2012-12-20 19:28 2009-09-14 Show GitHub Exploit DB Packet Storm
225900 4.3 警告 stanford - Stanford University WebAuth の weblogin/login.fcgi におけるパスワードを特定される脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-2945 2012-12-20 19:28 2009-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211701 7.5 HIGH
Network
samba
fedoraproject
opensuse
debian
samba
fedora
leap
debian_linux
A flaw was found when using samba as an Active Directory Domain Controller. Due to the way samba handles certain requests as an Active Directory Domain Controller LDAP server, an unauthorized user ca… CWE-674
 Uncontrolled Recursion
CVE-2020-10704 2024-11-21 13:55 2020-05-6 Show GitHub Exploit DB Packet Storm
211702 5.3 MEDIUM
Network
redhat
ibm
quarkus
oracle
hibernate_validator
websphere_application_server
jboss_enterprise_application_platform
satellite_capsule
satellite
quarkus
weblogic_server
A flaw was found in Hibernate Validator version 6.1.2.Final. A bug in the message interpolation processor enables invalid EL expressions to be evaluated as if they were valid. This flaw allows attack… - CVE-2020-10693 2024-11-21 13:55 2020-05-6 Show GitHub Exploit DB Packet Storm
211703 9.1 CRITICAL
Network
sae-it net-line_fw-50_firmware SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affected device and access files that should be inaccessible. CWE-22
Path Traversal
CVE-2020-10634 2024-11-21 13:55 2020-05-6 Show GitHub Exploit DB Packet Storm
211704 6.1 MEDIUM
Network
sae-it net-line_fw-50_firmware SAE IT-systems FW-50 Remote Telemetry Unit (RTU). The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in the output used as a webpage that is serve… CWE-79
Cross-site Scripting
CVE-2020-10630 2024-11-21 13:55 2020-05-6 Show GitHub Exploit DB Packet Storm
211705 6.5 MEDIUM
Local
qemu qemu A potential DoS flaw was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU version >= v5.0. Virtio-fs is meant to share a host file system directory with a guest… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-10717 2024-11-21 13:55 2020-05-5 Show GitHub Exploit DB Packet Storm
211706 5.3 MEDIUM
Network
samba
fedoraproject
opensuse
samba
fedora
leap
A use-after-free flaw was found in the way samba AD DC LDAP servers, handled 'Paged Results' control is combined with the 'ASQ' control. A malicious user in a samba AD could use this flaw to cause de… CWE-416
 Use After Free
CVE-2020-10700 2024-11-21 13:55 2020-05-5 Show GitHub Exploit DB Packet Storm
211707 4.7 MEDIUM
Network
redhat keycloak A flaw was found in Keycloak version 8.0.2 and 9.0.0, and was fixed in Keycloak version 9.0.1, where a malicious user registers as oneself. The attacker could then use the remove devices form to post… NVD-CWE-Other
CVE-2020-10686 2024-11-21 13:55 2020-05-5 Show GitHub Exploit DB Packet Storm
211708 7.8 HIGH
Local
lcds laquis_scada LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to arbitrary file creation by unauthorized users NVD-CWE-noinfo
CVE-2020-10622 2024-11-21 13:55 2020-05-5 Show GitHub Exploit DB Packet Storm
211709 5.5 MEDIUM
Local
lcds laquis_scada LCDS LAquis SCADA Versions 4.3.1 and prior. The affected product is vulnerable to sensitive information exposure by unauthorized users. CWE-200
Information Exposure
CVE-2020-10618 2024-11-21 13:55 2020-05-5 Show GitHub Exploit DB Packet Storm
211710 9.8 CRITICAL
Network
dom4j_project
oracle
opensuse
netapp
canonical
dom4j
insurance_policy_administration_j2ee
insurance_rules_palette
retail_integration_bus
webcenter_portal
utilities_framework
flexcube_core_banking
business_process_management_s…
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing ho… CWE-611
XXE
CVE-2020-10683 2024-11-21 13:55 2020-05-2 Show GitHub Exploit DB Packet Storm