Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228371	4.3	警告	tbmnet	-	TBmnetCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3747	2012-12-20 19:28	2009-10-22	Show	GitHub Exploit DB Packet Storm

228372	10	危険	riorey	-	RioRey RIOS における権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2009-3710	2012-12-20 19:28	2009-10-16	Show	GitHub Exploit DB Packet Storm

228373	5	警告	zoiper	-	ZoIPer におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-3704	2012-12-20 19:28	2009-10-16	Show	GitHub Exploit DB Packet Storm

228374	7.5	危険	php-calendar project	-	PHP-Calendar における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-3702	2012-12-20 19:28	2009-12-22	Show	GitHub Exploit DB Packet Storm

228375	5	警告	squidguard	-	squidGuard の sgLog.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-3700	2012-12-20 19:28	2009-10-28	Show	GitHub Exploit DB Packet Storm

228376	7.5	危険	The phpMyAdmin Project	-	phpMyAdmin の PDF スキーマジェネレータ機能における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3697	2012-12-20 19:28	2009-10-13	Show	GitHub Exploit DB Packet Storm

228377	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3696	2012-12-20 19:28	2009-10-13	Show	GitHub Exploit DB Packet Storm

228378	7.2	危険	サン・マイクロシステムズ	-	Solaris x86 上などで稼動している Sun VirtualBox の VBoxNetAdpCtl 設定ツールにおける権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-3692	2012-12-20 19:28	2009-10-6	Show	GitHub Exploit DB Packet Storm

228379	4.3	警告	promosi-web	-	Ardguest の ardguest.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3668	2012-12-20 19:28	2009-10-11	Show	GitHub Exploit DB Packet Storm

228380	7.5	危険	stanback	-	BS Counter の file/stats.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3659	2012-12-20 19:28	2009-10-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208011	6.5	MEDIUM Network	mozilla	firefox	When a user downloaded a file in Firefox for Android, if a cookie is set, it would have been re-sent during a subsequent file download operation on the same domain, regardless of whether the original…	CWE-565 Reliance on Cookies without Validation and Integrity Checking	CVE-2020-26955	2024-11-21 14:20	2020-12-9	Show	GitHub Exploit DB Packet Storm

208012	4.3	MEDIUM Network	mozilla	firefox	When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be u…	NVD-CWE-Other	CVE-2020-26954	2024-11-21 14:20	2020-12-9	Show	GitHub Exploit DB Packet Storm

208013	4.3	MEDIUM Network	mozilla	firefox firefox_esr thunderbird	It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user. This vulnerabilit…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2020-26953	2024-11-21 14:20	2020-12-9	Show	GitHub Exploit DB Packet Storm

208014	8.8	HIGH Network	mozilla	firefox	Incorrect bookkeeping of functions inlined during JIT compilation could have led to memory corruption and a potentially exploitable crash when handling out-of-memory errors. This vulnerability affect…	CWE-787 Out-of-bounds Write	CVE-2020-26952	2024-11-21 14:20	2020-12-9	Show	GitHub Exploit DB Packet Storm

208015	6.1	MEDIUM Network	mozilla	firefox firefox_esr thunderbird	A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privilege…	CWE-79 Cross-site Scripting	CVE-2020-26951	2024-11-21 14:20	2020-12-9	Show	GitHub Exploit DB Packet Storm

208016	8.8	HIGH Network	mozilla	firefox_esr thunderbird firefox	In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox …	CWE-416 Use After Free	CVE-2020-26950	2024-11-21 14:20	2020-12-9	Show	GitHub Exploit DB Packet Storm

208017	8.8	HIGH Network	katacontainers	kata_containers	An issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. The runtime will execute binaries given using annotations without any kind of validation. Someone who is granted acc…	NVD-CWE-noinfo	CVE-2020-27151	2024-11-21 14:20	2020-12-7	Show	GitHub Exploit DB Packet Storm

208018	9.8	CRITICAL Network	edimax	ic-3116w_firmware ic-3140w_firmware	A stack-based buffer-overflow exists in Edimax IP-Camera IC-3116W (v3.06) and IC-3140W (v3.07), which allows an unauthenticated, unauthorized attacker to perform remote-code-execution due to a crafte…	CWE-787 Out-of-bounds Write	CVE-2020-26762	2024-11-21 14:20	2020-12-2	Show	GitHub Exploit DB Packet Storm

208019	4.8	MEDIUM Network	eclipse netapp oracle apache debian	jetty snap_creator_framework oncommand_system_manager flexcube_private_banking communications_offline_mediation_controller communications_services_gatekeeper communications_pricing_…	In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients…	NVD-CWE-noinfo	CVE-2020-27218	2024-11-21 14:20	2020-11-28	Show	GitHub Exploit DB Packet Storm

208020	8.8	HIGH Network	cloudera	data_engineering	Cloudera Data Engineering (CDE) before 1.1 was vulnerable to a CSRF attack.	CWE-352 Origin Validation Error	CVE-2020-26936	2024-11-21 14:20	2020-11-27	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed