Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226141	9.3	危険	サン・マイクロシステムズ	-	Sun Java SE Runtime Environment の deploytk.dll におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1671	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226142	7.5	危険	tcpdb	-	TCPDB の user/index.php における admin アカウントを追加される脆弱性	CWE-287 不適切な認証	CVE-2009-1670	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226143	10	危険	Smarty	-	Smarty の libs/plugins/function.math.php における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1669	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226144	4	警告	TYPSoft	-	TYPSoft FTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-1668	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226145	7.5	危険	recipescript	-	Wright Way Services Recipe Script の admin/login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1662	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226146	9.3	危険	urusoft	-	URUWorks ViPlay3 におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1660	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226147	7.5	危険	realtywebware	-	Realty Webware Technologies Realty Web-Base の admin/admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1658	2012-12-20 19:10	2009-05-18	Show	GitHub Exploit DB Packet Storm

226148	10	危険	Xerox	-	Xerox WorkCentre における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2009-1656	2012-12-20 19:10	2009-05-15	Show	GitHub Exploit DB Packet Storm

226149	7.8	危険	tinybutstrong	-	TinyButStrong の examples/tbs_us_examples_0view.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1653	2012-12-20 19:10	2009-05-16	Show	GitHub Exploit DB Packet Storm

226150	7.5	危険	tenfourzero	-	Shutter の photos.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1650	2012-12-20 19:10	2009-05-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211321	9.8	CRITICAL Network	qualcomm	msm8960 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 sdm630 qca6174a qca6574au qca6584au qca9379 msm8976 msm8952 apq809…	Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…	CWE-824 Access of Uninitialized Pointer	CVE-2020-11138	2024-11-21 13:56	2021-01-21	Show	GitHub Exploit DB Packet Storm

211322	9.8	CRITICAL Network	qualcomm	msm8960 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 sdm630 qca6174a qca6574au qca6584au qca9379 msm8976 msm8952 apq809…	Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bounds resulting in possible device instability in Snapdragon Auto, Snapdragon Comp…	CWE-190 Integer Overflow or Wraparound	CVE-2020-11137	2024-11-21 13:56	2021-01-21	Show	GitHub Exploit DB Packet Storm

211323	9.8	CRITICAL Network	qualcomm	msm8960 mdm9206 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 qca9379 msm8976 sdm630 qca6584au qca6584 qca6574au qca6174…	Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory requirement in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn…	CWE-125 Out-of-bounds Read	CVE-2020-11136	2024-11-21 13:56	2021-01-21	Show	GitHub Exploit DB Packet Storm

211324	9.8	CRITICAL Network	webswing	webswing	JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution.	NVD-CWE-noinfo	CVE-2020-11103	2024-11-21 13:56	2020-12-31	Show	GitHub Exploit DB Packet Storm

211325	7.5	HIGH Network	linuxfoundation	indy-node	Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a s…	-	CVE-2020-11093	2024-11-21 13:56	2020-12-25	Show	GitHub Exploit DB Packet Storm

211326	5.3	MEDIUM Network	redhat	keycloak	A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This flaw allows an attacker to use this param…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-10770	2024-11-21 13:56	2020-12-16	Show	GitHub Exploit DB Packet Storm

211327	7.5	HIGH Network	nlnetlabs	unbound	An incomplete fix for CVE-2020-12662 was shipped for Unbound in Red Hat Enterprise Linux 7, as part of erratum RHSA-2020:2414. Vulnerable versions of Unbound could still amplify an incoming query int…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10772	2024-11-21 13:56	2020-11-28	Show	GitHub Exploit DB Packet Storm

211328	5.5	MEDIUM Local	heketi_project redhat	heketi enterprise_linux gluster_storage openshift_container_platform	An information-disclosure flaw was found in the way Heketi before 10.1.0 logs sensitive information. This flaw allows an attacker with local access to the Heketi server to read potentially sensitive …	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-10763	2024-11-21 13:56	2020-11-25	Show	GitHub Exploit DB Packet Storm

211329	5.5	MEDIUM Local	redhat	gluster-block	An information-disclosure flaw was found in the way that gluster-block before 0.5.1 logs the output from gluster-block CLI operations. This includes recording passwords to the cmd_history.log file wh…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-10762	2024-11-21 13:56	2020-11-25	Show	GitHub Exploit DB Packet Storm

211330	4.8	MEDIUM Network	redhat	keycloak	A flaw was found in Keycloak before version 12.0.0, where it is possible to add unsafe schemes for the redirect_uri parameter. This flaw allows an attacker to perform a Cross-site scripting attack.	CWE-79 Cross-site Scripting	CVE-2020-10776	2024-11-21 13:56	2020-11-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed