Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227271 7.5 危険 phprisk - NetRisk における任意のユーザのパスワードを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7155 2012-12-20 19:10 2009-09-2 Show GitHub Exploit DB Packet Storm
227272 6.8 警告 Simon Rycroft - SID における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7152 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
227273 10 危険 synfig - Synfig Animation Studio における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2008-7148 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
227274 10 危険 RARLAB - RARLAB WinRAR における脆弱性 CWE-noinfo
情報不足 		CVE-2008-7144 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
227275 6.8 警告 phpBB - phpBB におけるセッションをハイジャックされる脆弱性 CWE-200
情報漏えい 		CVE-2008-7143 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
227276 4.3 警告 redgalaxy - Chris LaPointe RedGalaxy Download Center のデフォルト URI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-7134 2012-12-20 19:10 2009-09-1 Show GitHub Exploit DB Packet Storm
227277 5 警告 xyssl - XySSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-7129 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
227278 7.5 危険 xyssl - XySSL の ssl_parse_client_key_exchange 関数における鍵を回復される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7128 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
227279 7.5 危険 zkup - zKup CMS における管理者権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-7124 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
227280 6.8 警告 zkup - zKup CMS の admin/configuration/modifier.php における任意の PHP コード挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-7123 2012-12-20 19:10 2009-08-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196021 7.5 HIGH
Network 		apple mac_os_x A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A remote attacker may cause an unexpected application termination. CWE-787
 Out-of-bounds Write 		CVE-2020-9869 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196022 9.1 CRITICAL
Network 		apple mac_os_x
tvos
iphone_os
watchos
ipados 		A certificate validation issue existed when processing administrator added certificates. This issue was addressed with improved certificate validation. This issue is fixed in iOS 13.6 and iPadOS 13.6… CWE-295
Improper Certificate Validation  		CVE-2020-9868 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196023 7.8 HIGH
Local 		apple mac_os_x
tvos
iphone_os
watchos
ipados 		A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8, watchOS 6.2.8. An application may be a… CWE-665
 Improper Initialization 		CVE-2020-9863 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196024 7.8 HIGH
Local 		apple mac_os_x
iphone_os
tvos
ipados 		A logic issue was addressed with improved validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5. An application may be able to gain elevated privileges. NVD-CWE-noinfo
CVE-2020-9854 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196025 7.8 HIGH
Local 		apple mac_os_x A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to determine kernel memory layout. CWE-20
CWE-787
 Improper Input Validation 
 Out-of-bounds Write 		CVE-2020-9853 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196026 7.5 HIGH
Network 		apple mac_os_x An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A remote attacker may be able to leak sensitive user information. CWE-125
Out-of-bounds Read 		CVE-2020-9828 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196027 6.8 MEDIUM
Physics 		apple mac_os_x A logic issue was addressed with improved restrictions. This issue is fixed in macOS Catalina 10.15.5. A person with physical access to a Mac may be able to bypass Login Window. NVD-CWE-noinfo
CVE-2020-9810 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196028 7.0 HIGH
Local 		apple mac_os_x A race condition was addressed with improved state handling. This issue is fixed in macOS Catalina 10.15.5. An application may be able to execute arbitrary code with kernel privileges. CWE-362
Race Condition 		CVE-2020-9796 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196029 5.3 MEDIUM
Network 		apple iphone_os
tvos
watchos
ipad_os
mac_os_x 		A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2. Some websites may not have appeared in Safari … NVD-CWE-Other
CVE-2020-9787 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm
196030 7.1 HIGH
Local 		apple mac_os_x An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system termination or read kernel memor… CWE-125
Out-of-bounds Read 		CVE-2020-9779 2024-11-21 14:41 2020-10-23 Show GitHub Exploit DB Packet Storm