Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 2:21 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226211	4.3	警告	レッドハット	-	C2Net Stronghold におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1349	2012-12-20 19:10	2009-04-21	Show	GitHub Exploit DB Packet Storm

226212	6	警告	TWiki	-	TWiki におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-1339	2012-12-20 19:10	2009-04-5	Show	GitHub Exploit DB Packet Storm

226213	5	警告	サン・マイクロシステムズ	-	Sun Java System Directory Server および Enterprise Edition の Online Help 機能におけるファイルの一部のコンテンツを取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-1332	2012-12-20 19:10	2009-04-15	Show	GitHub Exploit DB Packet Storm

226214	7.5	危険	webfileexplorer	-	Web File Explorer の body.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-1323	2012-12-20 19:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

226215	4.3	警告	zazzle	-	Zazzle Store Builder の include/zstore.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1320	2012-12-20 19:10	2009-04-17	Show	GitHub Exploit DB Packet Storm

226216	10	危険	webfileexplorer	-	Web File Explorer の body.asp における任意のファイルを作成される脆弱性	CWE-noinfo 情報不足	CVE-2009-1314	2012-12-20 19:10	2009-04-16	Show	GitHub Exploit DB Packet Storm

226217	5	警告	Rapid Leech	-	Rapidleech の upload.php における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-1089	2012-12-20 19:10	2009-03-25	Show	GitHub Exploit DB Packet Storm

226218	9.3	危険	pplive	-	PPLive の PPLive.exe における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1087	2012-12-20 19:10	2009-03-25	Show	GitHub Exploit DB Packet Storm

226219	5	警告	Piwik	-	Piwik における API 鍵を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1085	2012-12-20 19:10	2009-03-25	Show	GitHub Exploit DB Packet Storm

226220	6.4	警告	サン・マイクロシステムズ	-	Sun Java System IdM における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-1084	2012-12-20 19:10	2009-03-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198011	5.5	MEDIUM Local	vmware	velero	Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.	NVD-CWE-noinfo	CVE-2020-3996	2024-11-21 14:32	2020-10-23	Show	GitHub Exploit DB Packet Storm

198012	5.3	MEDIUM Network	vmware	esxi workstation cloud_foundation fusion	In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI host drivers used by VMware hypervisors cont…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-3995	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198013	7.4	HIGH Network	vmware	vcenter_server cloud_foundation	VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate v…	CWE-295 Improper Certificate Validation	CVE-2020-3994	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198014	5.9	MEDIUM Network	vmware	cloud_foundation nsx-t_data_center	VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious ac…	NVD-CWE-noinfo	CVE-2020-3993	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198015	9.8	CRITICAL Network	vmware	esxi cloud_foundation	OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the man…	CWE-416 Use After Free	CVE-2020-3992	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198016	5.8	MEDIUM Network	vmware	esxi workstation cloud_foundation fusion	VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds read vulne…	CWE-125 CWE-367 Out-of-bounds Read Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-3981	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198017	5.4	MEDIUM Network	ibm	sterling_file_gateway sterling_b2b_integrator	IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.0.3.1 and IBM Sterling File Gateway 2.2.0.0 through 6.0.3.1 are vulnerable to cross-site scripting. This vulnerability allows users to e…	CWE-79 Cross-site Scripting	CVE-2020-4564	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198018	5.5	MEDIUM Local	ibm	spectrum_scale	IBM Spectrum Scale V4.2.0.0 through V4.2.3.22 and V5.0.0.0 through V5.0.5 could allow a local attacker to cause a denial of service by sending a large number of RPC requests to the mmfsd daemon which…	NVD-CWE-noinfo	CVE-2020-4491	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198019	7.7	HIGH Network	vmware	esxi cloud_foundation workstation workstation_player fusion	VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds write vuln…	CWE-787 CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-3982	2024-11-21 14:32	2020-10-21	Show	GitHub Exploit DB Packet Storm

198020	7.5	HIGH Network	ibm	security_guardium_big_data_intelligence	IBM Security Guardium Big Data Intelligence 1.0 (SonarG) uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 17556…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-4254	2024-11-21 14:32	2020-10-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed