Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226941 4.3 警告 シマンテック - Symantec Norton AntiVirus などの製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-3104 2012-12-20 19:28 2009-08-26 Show GitHub Exploit DB Packet Storm
226942 4.3 警告 シマンテック - Symantec IM Manager のコンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3036 2012-12-20 19:28 2010-02-18 Show GitHub Exploit DB Packet Storm
226943 4.3 警告 シマンテック - Symantec Altiris Notification Server の Web コンソールにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2009-3035 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
226944 10 危険 zmanda - ZRM の socket-server.pl の doHotCopy サブルーチンにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2009-3102 2012-12-20 19:28 2009-08-25 Show GitHub Exploit DB Packet Storm
226945 5 警告 Ruby on Rails project - Ruby on Rails の特定のアルゴリズムにおけるダイジェストを偽造される脆弱性 CWE-200
情報漏えい
CVE-2009-3086 2012-12-20 19:28 2009-09-8 Show GitHub Exploit DB Packet Storm
226946 5 警告 Pidgin - Pidgin で使用される libpurple の MSN プロトコルプラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-3084 2012-12-20 19:28 2009-09-8 Show GitHub Exploit DB Packet Storm
226947 7.5 危険 snowhall - Snow Hall Silurus System の wcategory.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3082 2012-12-20 19:28 2009-09-4 Show GitHub Exploit DB Packet Storm
226948 7.5 危険 Uiga - Uiga Church Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-3081 2012-12-20 19:28 2009-09-4 Show GitHub Exploit DB Packet Storm
226949 4.3 警告 webformatique - Reservation Manager の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3067 2012-12-20 19:28 2009-09-3 Show GitHub Exploit DB Packet Storm
226950 4.3 警告 propertywatchscript - PropertyWatchScript.com Property Watch におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-3066 2012-12-20 19:28 2009-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209851 5.4 MEDIUM
Network
bloomreach experience_manager An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows XSS in the login page via the loginmessage parameter, the text editor via the src attribute of HTML ele… CWE-79
Cross-site Scripting
CVE-2020-14988 2024-11-21 14:04 2021-03-12 Show GitHub Exploit DB Packet Storm
209852 7.2 HIGH
Network
bloomreach experience_manager An issue was discovered in Bloomreach Experience Manager (brXM) 4.1.0 through 14.2.2. It allows remote attackers to execute arbitrary code because there is a mishandling of the capability for adminis… CWE-74
CWE-862
Injection
 Missing Authorization
CVE-2020-14987 2024-11-21 14:04 2021-03-12 Show GitHub Exploit DB Packet Storm
209853 9.1 CRITICAL
Network
loklak_project loklak loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. A… - CVE-2020-15097 2024-11-21 14:04 2021-02-3 Show GitHub Exploit DB Packet Storm
209854 9.8 CRITICAL
Network
oracle utilities_framework
coherence
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1… NVD-CWE-noinfo
CVE-2020-14756 2024-11-21 14:04 2021-01-21 Show GitHub Exploit DB Packet Storm
209855 4.7 MEDIUM
Network
oracle cloud_infrastructure_identity_and_access_management Vulnerability in the Oracle Cloud Infrastructure Identity and Access Management product of Oracle Cloud Services. Easily exploitable vulnerability allows high privileged attacker with network access … NVD-CWE-noinfo
CVE-2020-14874 2024-11-21 14:04 2020-12-23 Show GitHub Exploit DB Packet Storm
209856 5.9 MEDIUM
Network
askey ap5100w_firmware Askey AP5100W devices through AP5100W_Dual_SIG_1.01.097 are affected by WPS PIN offline brute-force cracking. This arises because of issues with the random number selection for the Diffie-Hellman exc… CWE-330
 Use of Insufficiently Random Values
CVE-2020-15023 2024-11-21 14:04 2020-12-12 Show GitHub Exploit DB Packet Storm
209857 9.8 CRITICAL
Network
oracle fusion_middleware Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.… NVD-CWE-noinfo
CVE-2020-14750 2024-11-21 14:04 2020-11-3 Show GitHub Exploit DB Packet Storm
209858 4.8 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows stats/diagnostic?param= XSS. CWE-79
Cross-site Scripting
CVE-2020-15004 2024-11-21 14:04 2020-10-23 Show GitHub Exploit DB Packet Storm
209859 4.3 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows Information Exposure because a user can obtain the IP address and User-Agent string of a different user (via the session API during shared Drive access). NVD-CWE-noinfo
CVE-2020-15003 2024-11-21 14:04 2020-10-23 Show GitHub Exploit DB Packet Storm
209860 5.0 MEDIUM
Network
open-xchange open-xchange_appsuite OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-15002 2024-11-21 14:04 2020-10-23 Show GitHub Exploit DB Packet Storm