Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227421	1.9	注意	GNOME Project	-	GNOME Display Manager における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-2387	2012-12-25 13:44	2010-06-2	Show	GitHub Exploit DB Packet Storm

227422	4	警告	レッドハット VMware Samba Project	-	Samba Web Administration Tool におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-2522	2012-12-21 17:34	2011-07-26	Show	GitHub Exploit DB Packet Storm

227423	4.4	警告	ターボリナックス VMware レッドハット Samba Project	-	Samba の smbfs における権限を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0787	2012-12-21 16:50	2010-02-26	Show	GitHub Exploit DB Packet Storm

227424	2.1	注意	レッドハット VMware Samba Project	-	Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0547	2012-12-21 16:48	2010-02-4	Show	GitHub Exploit DB Packet Storm

227425	9.3	危険	VMware RPM レッドハット	-	RPM におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3378	2012-12-21 16:47	2011-12-24	Show	GitHub Exploit DB Packet Storm

227426	7.2	危険	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2059	2012-12-21 16:46	2010-06-8	Show	GitHub Exploit DB Packet Storm

227427	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

227428	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

227429	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

227430	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202541	7.5	HIGH Network	jetbrains	ktor	In Ktor before 1.3.0, request smuggling is possible when running behind a proxy that doesn't handle Content-Length and Transfer-Encoding properly or doesn't handle \n as a headers separator.	CWE-444 HTTP Request Smuggling	CVE-2020-5207	2024-11-21 14:33	2020-01-28	Show	GitHub Exploit DB Packet Storm

202542	5.3	MEDIUM Network	sylius	syliusresourcebundle	Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make…	CWE-200 Information Exposure	CVE-2020-5220	2024-11-21 14:33	2020-01-28	Show	GitHub Exploit DB Packet Storm

202543	4.3	MEDIUM Network	sylius	sylius	Affected versions of Sylius give attackers the ability to switch channels via the _channel_code GET parameter in production environments. This was meant to be enabled only when kernel.debug is set to…	CWE-444 HTTP Request Smuggling	CVE-2020-5218	2024-11-21 14:33	2020-01-28	Show	GitHub Exploit DB Packet Storm

202544	5.4	MEDIUM Network	simplesamlphp	simplesamlphp	Cross-site scripting in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp 1.18.…	CWE-79 Cross-site Scripting	CVE-2020-5226	2024-11-21 14:33	2020-01-25	Show	GitHub Exploit DB Packet Storm

202545	5.4	MEDIUM Network	simplesamlphp	simplesamlphp	Log injection in SimpleSAMLphp before version 1.18.4. The www/erroreport.php script, which receives error reports and sends them via email to the system administrator, did not properly sanitize the r…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-5225	2024-11-21 14:33	2020-01-25	Show	GitHub Exploit DB Packet Storm

202546	8.8	HIGH Network	django-user-sessions_project	django-user-sessions	In Django User Sessions (django-user-sessions) before 1.7.1, the views provided allow users to terminate specific sessions. The session key is used to identify sessions, and thus included in the rend…	CWE-326 Inadequate Encryption Strength	CVE-2020-5224	2024-11-21 14:33	2020-01-25	Show	GitHub Exploit DB Packet Storm

202547	8.8	HIGH Network	peerigon	angular-expressions	Angular Expressions before version 1.0.1 has a remote code execution vulnerability if you call expressions.compile(userControlledInput) where userControlledInput is text that comes from user input. I…	CWE-74 Injection	CVE-2020-5219	2024-11-21 14:33	2020-01-25	Show	GitHub Exploit DB Packet Storm

202548	5.8	MEDIUM Network	twitter	secure_headers	In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.8.0, 5.1.0, and 6.2.0. If user-supplied input was passed into append/override_content_s…	CWE-74 Injection	CVE-2020-5217	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

202549	5.8	MEDIUM Network	twitter	secure_headers	In Secure Headers (RubyGem secure_headers), a directive injection vulnerability is present in versions before 3.9.0, 5.2.0, and 6.3.0. If user-supplied input was passed into append/override_content_s…	CWE-74 Injection	CVE-2020-5216	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm

202550	4.4	MEDIUM Network	privatebin	privatebin	In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before 1.3.2, a persistent XSS attack is possible. Under certain conditions, a user provided attachment file name can inject HTML leading to a per…	CWE-79 Cross-site Scripting	CVE-2020-5223	2024-11-21 14:33	2020-01-23	Show	GitHub Exploit DB Packet Storm