Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226031	5	警告	WordPress.org	-	WordPress および WordPress MU における有効なユーザ名を列挙される脆弱性	CWE-16 環境設定	CVE-2009-2336	2012-12-20 19:10	2009-07-10	Show	GitHub Exploit DB Packet Storm

226032	5	警告	WordPress.org	-	WordPress および WordPress MU における有効なユーザ名を列挙される脆弱性	CWE-16 環境設定	CVE-2009-2335	2012-12-20 19:10	2009-07-10	Show	GitHub Exploit DB Packet Storm

226033	4.9	警告	WordPress.org	-	WordPress および WordPress MU の wp-admin/admin.php における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2009-2334	2012-12-20 19:10	2009-07-9	Show	GitHub Exploit DB Packet Storm

226034	2.1	注意	サン・マイクロシステムズ	-	Solaris 上の Sun Lightweight Availability Collection Tool における任意のファイルを上書きされる脆弱性	CWE-362 競合状態	CVE-2009-2314	2012-12-20 19:10	2009-07-2	Show	GitHub Exploit DB Packet Storm

226035	7.5	危険	selbstzweck	-	WBB3 用の rGallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2311	2012-12-20 19:10	2009-07-2	Show	GitHub Exploit DB Packet Storm

226036	7.5	危険	punres	-	PunBB 用の Affiliation モジュールの affiliates.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-2308	2012-12-20 19:10	2009-07-2	Show	GitHub Exploit DB Packet Storm

226037	7.5	危険	tutorial-share	-	Optimum Web Design Tutorial Share における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2293	2012-12-20 19:10	2009-07-1	Show	GitHub Exploit DB Packet Storm

226038	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2284	2012-12-20 19:10	2009-06-30	Show	GitHub Exploit DB Packet Storm

226039	10	危険	UMN	-	MapServer の mapserv におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2281	2012-12-20 19:10	2009-10-22	Show	GitHub Exploit DB Packet Storm

226040	2.6	注意	サン・マイクロシステムズ	-	Sun Java System Access Manager の CDC servlet におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-2268	2012-12-20 19:10	2009-06-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197731	8.8	HIGH Network	dell	emc_isilon_onefs emc_powerscale_onefs	Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage o…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-5371	2024-11-21 14:34	2020-07-7	Show	GitHub Exploit DB Packet Storm

197732	7.5	HIGH Network	dell	vxrail_d560f_firmware vxrail_d560_firmware	Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an e…	CWE-862 Missing Authorization	CVE-2020-5368	2024-11-21 14:34	2020-07-7	Show	GitHub Exploit DB Packet Storm

197733	7.3	HIGH Network	f5	nginx_controller	In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian/Ubuntu system.	NVD-CWE-noinfo	CVE-2020-5911	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197734	7.5	HIGH Network	f5	nginx_controller	In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, the Neural Autonomic Transport System (NATS) messaging services in use by the NGINX Controller do not require any form of authentication, so any succe…	CWE-306 Missing Authentication for Critical Function	CVE-2020-5910	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197735	5.4	MEDIUM Network	f5	nginx_controller	In versions 3.0.0-3.5.0, 2.0.0-2.9.0, and 1.0.1, when users run the command displayed in NGINX Controller user interface (UI) to fetch the agent installer, the server TLS certificate is not verified.	CWE-295 Improper Certificate Validation	CVE-2020-5909	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197736	5.5	MEDIUM Local	f5	big-ip_access_policy_manager	In versions bundled with BIG-IP APM 12.1.0-12.1.5 and 11.6.1-11.6.5.2, Edge Client for Linux exposes full session ID in the local log files.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-5908	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197737	7.2	HIGH Network	f5	big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an authorized user provided with access only to the TMOS Shell (tmsh) may be able to conduc…	NVD-CWE-noinfo	CVE-2020-5907	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197738	8.1	HIGH Network	f5	big-ip_local_traffic_manager big-ip_advanced_firewall_manager big-ip_application_acceleration_manager big-ip_analytics big-ip_access_policy_manager big-ip_application_security_manager<…	In versions 13.1.0-13.1.3.3, 12.1.0-12.1.5.2, and 11.6.1-11.6.5.2, the BIG-IP system does not properly enforce the access controls for the scp.blacklist files. This allows Admin and Resource Admin us…	CWE-276 Incorrect Default Permissions	CVE-2020-5906	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197739	9.6	CRITICAL Network	f5	nginx_controller	In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. If the victim user is logged in as admin this could result in a complete compro…	CWE-79 Cross-site Scripting	CVE-2020-5901	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

197740	7.8	HIGH Local	f5	nginx_controller	In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database co…	CWE-312 CWE-319 CWE-522 Cleartext Storage of Sensitive Information Cleartext Transmission of Sensitive Information Insufficiently Protected Credentials	CVE-2020-5899	2024-11-21 14:34	2020-07-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed