Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226251 5 警告 サン・マイクロシステムズ - Sun Java System Identity Manager IdM における有効なユーザ名を列挙される脆弱性 CWE-200
情報漏えい 		CVE-2009-1076 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
226252 5 警告 サン・マイクロシステムズ - Sun Java System IdM における有効なユーザ名を列挙される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-1075 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
226253 5 警告 サン・マイクロシステムズ - Sun Java System IdM における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2009-1074 2012-12-20 19:10 2009-03-19 Show GitHub Exploit DB Packet Storm
226254 9.3 危険 randomsoftware - Icarus におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1071 2012-12-20 19:10 2009-03-26 Show GitHub Exploit DB Packet Storm
226255 9.3 危険 powerzip - Trident PowerZip におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1059 2012-12-20 19:10 2009-03-24 Show GitHub Exploit DB Packet Storm
226256 10 危険 zipgenius - ZipGenius におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1058 2012-12-20 19:10 2009-03-24 Show GitHub Exploit DB Packet Storm
226257 4 警告 Sitecore - Sitecore CMS の Web サービスにおけるセキュリティデータベースへのアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2009-1055 2012-12-20 19:10 2009-03-24 Show GitHub Exploit DB Packet Storm
226258 10 危険 snom - snom VoIP phones snom 300 などの Web インターフェースにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-1048 2012-12-20 19:10 2009-08-14 Show GitHub Exploit DB Packet Storm
226259 9.3 危険 winasm - WinAsm Studio におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1040 2012-12-20 19:10 2009-03-20 Show GitHub Exploit DB Packet Storm
226260 6.5 警告 yap - YAP Blog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1038 2012-12-20 19:10 2009-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200041 7.5 HIGH
Network 		leptonica
fedoraproject 		leptonica
fedora 		Leptonica before 1.80.0 allows a heap-based buffer over-read in pixReadFromTiffStream, related to tiffio.c. CWE-125
Out-of-bounds Read 		CVE-2020-36280 2024-11-21 14:29 2021-03-12 Show GitHub Exploit DB Packet Storm
200042 7.5 HIGH
Network 		leptonica
fedoraproject
debian 		leptonica
fedora
debian_linux 		Leptonica before 1.80.0 allows a heap-based buffer over-read in rasteropGeneralLow, related to adaptmap_reg.c and adaptmap.c. CWE-125
Out-of-bounds Read 		CVE-2020-36279 2024-11-21 14:29 2021-03-12 Show GitHub Exploit DB Packet Storm
200043 7.5 HIGH
Network 		leptonica
fedoraproject
debian 		leptonica
fedora
debian_linux 		Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c. CWE-125
Out-of-bounds Read 		CVE-2020-36278 2024-11-21 14:29 2021-03-12 Show GitHub Exploit DB Packet Storm
200044 7.5 HIGH
Network 		leptonica
fedoraproject
debian 		leptonica
fedora
debian_linux 		Leptonica before 1.80.0 allows a denial of service (application crash) via an incorrect left shift in pixConvert2To8 in pixconv.c. CWE-670
 Always-Incorrect Control Flow Implementation 		CVE-2020-36277 2024-11-21 14:29 2021-03-12 Show GitHub Exploit DB Packet Storm
200045 7.5 HIGH
Network 		identitymodel_project identitymodel An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens. NVD-CWE-noinfo
CVE-2020-36255 2024-11-21 14:29 2021-03-5 Show GitHub Exploit DB Packet Storm
200046 5.3 MEDIUM
Network 		atlassian crowd The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF d… NVD-CWE-noinfo
CVE-2020-36240 2024-11-21 14:29 2021-03-2 Show GitHub Exploit DB Packet Storm
200047 8.1 HIGH
Network 		dropbear_ssh_project dropbear_ssh scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685. NVD-CWE-noinfo
CVE-2020-36254 2024-11-21 14:29 2021-02-25 Show GitHub Exploit DB Packet Storm
200048 5.0 MEDIUM
Network 		atlassian atlassian-gadgets The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-36232 2024-11-21 14:29 2021-02-23 Show GitHub Exploit DB Packet Storm
200049 4.6 MEDIUM
Physics 		owncloud owncloud The ownCloud application before 2.15 for Android allows attackers to use adb to include a PIN preferences value in a backup archive, and consequently bypass the PIN lock feature by restoring from thi… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-36248 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm
200050 5.7 MEDIUM
Adjacent 		owncloud owncloud ownCloud Server 10.x before 10.3.1 allows an attacker, who has one outgoing share from a victim, to access any version of any file by sending a request for a predictable ID number. CWE-330
 Use of Insufficiently Random Values 		CVE-2020-36252 2024-11-21 14:29 2021-02-19 Show GitHub Exploit DB Packet Storm