Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 2:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226651	7.5	危険	MySQL AB オラクル	-	MySQL で使用される yaSSL におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0882	2012-12-25 13:52	2012-12-4	Show	GitHub Exploit DB Packet Storm

226652	4.3	警告	The Perl Foundation	-	Perl の File::Glob モジュールにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-Other その他	CVE-2011-2728	2012-12-25 13:45	2012-12-21	Show	GitHub Exploit DB Packet Storm

226653	1.9	注意	GNOME Project	-	GNOME Display Manager における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-2387	2012-12-25 13:44	2010-06-2	Show	GitHub Exploit DB Packet Storm

226654	4	警告	レッドハット VMware Samba Project	-	Samba Web Administration Tool におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-2522	2012-12-21 17:34	2011-07-26	Show	GitHub Exploit DB Packet Storm

226655	4.4	警告	ターボリナックス VMware レッドハット Samba Project	-	Samba の smbfs における権限を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0787	2012-12-21 16:50	2010-02-26	Show	GitHub Exploit DB Packet Storm

226656	2.1	注意	レッドハット VMware Samba Project	-	Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0547	2012-12-21 16:48	2010-02-4	Show	GitHub Exploit DB Packet Storm

226657	9.3	危険	VMware RPM レッドハット	-	RPM におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3378	2012-12-21 16:47	2011-12-24	Show	GitHub Exploit DB Packet Storm

226658	7.2	危険	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2059	2012-12-21 16:46	2010-06-8	Show	GitHub Exploit DB Packet Storm

226659	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

226660	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209751	6.1	MEDIUM Network	extremenetworks	extreme_management_center	Extreme Analytics in Extreme Management Center before 8.5.0.169 allows unauthenticated reflected XSS via a parameter in a GET request, aka CFD-4887.	CWE-79 Cross-site Scripting	CVE-2020-16847	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

209752	5.9	MEDIUM Network	amazon	firecracker	In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured wit…	NVD-CWE-noinfo	CVE-2020-16843	2024-11-21 14:07	2020-08-5	Show	GitHub Exploit DB Packet Storm

209753	9.1	CRITICAL Network	kee	keepassrpc	The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 is missing validation for a client-provided parameter, which allows remote attackers to read and modify data in the KeePass database vi…	CWE-20 Improper Input Validation	CVE-2020-16272	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

209754	9.1	CRITICAL Network	kee	keepassrpc	The SRP-6a implementation in Kee Vault KeePassRPC before 1.12.0 generates insufficiently random numbers, which allows remote attackers to read and modify data in the KeePass database via a WebSocket …	CWE-330 Use of Insufficiently Random Values	CVE-2020-16271	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

209755	5.5	MEDIUM Local	radare fedoraproject	radare2 fedora	radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.	NVD-CWE-noinfo	CVE-2020-16269	2024-11-21 14:07	2020-08-4	Show	GitHub Exploit DB Packet Storm

209756	8.8	HIGH Network	mozilla	thunderbird	During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session. This vulnerability affects Thunderbird < 78.7.	CWE-77 Command Injection	CVE-2020-15685	2024-11-21 14:06	2022-12-23	Show	GitHub Exploit DB Packet Storm

209757	7.6	HIGH Network	mozilla	vpn	An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user to login via that URL, and obtain authenticated access as …	CWE-384 Session Fixation	CVE-2020-15679	2024-11-21 14:06	2022-12-23	Show	GitHub Exploit DB Packet Storm

209758	5.3	MEDIUM Network	fedoraproject	supybot-fedora	supybot-fedora implements the command 'refresh', that refreshes the cache of all users from FAS. This takes quite a while to run, and zodbot stops responding to requests during this time.	NVD-CWE-noinfo	CVE-2020-15853	2024-11-21 14:06	2022-10-18	Show	GitHub Exploit DB Packet Storm

209759	6.1	MEDIUM Network	redhat	bodhi	Two cross-site scripting vulnerabilities were fixed in Bodhi 5.6.1.	CWE-79 Cross-site Scripting	CVE-2020-15855	2024-11-21 14:06	2022-10-8	Show	GitHub Exploit DB Packet Storm

209760	7.5	HIGH Network	lemonldap-ng debian	lemonldap\ debian_linux	In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::L…	CWE-295 Improper Certificate Validation	CVE-2020-16093	2024-11-21 14:06	2022-07-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed