Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228421	4.4	警告	ターボリナックス VMware レッドハット Samba Project	-	Samba の smbfs における権限を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0787	2012-12-21 16:50	2010-02-26	Show	GitHub Exploit DB Packet Storm

228422	2.1	注意	レッドハット VMware Samba Project	-	Samba の client/mount.cifs.c におけるサービス運用妨害 (mtab 破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0547	2012-12-21 16:48	2010-02-4	Show	GitHub Exploit DB Packet Storm

228423	9.3	危険	VMware RPM レッドハット	-	RPM におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-94 コード・インジェクション	CVE-2011-3378	2012-12-21 16:47	2011-12-24	Show	GitHub Exploit DB Packet Storm

228424	7.2	危険	サイバートラスト株式会社 VMware レッドハット	-	Red Hat Package Manager の lib/fsm.c における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2059	2012-12-21 16:46	2010-06-8	Show	GitHub Exploit DB Packet Storm

228425	7.2	危険	VMware Linux	-	Linux Kernel の net/wireless/nl80211.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2517	2012-12-21 16:44	2012-05-24	Show	GitHub Exploit DB Packet Storm

228426	2.1	注意	VMware Linux	-	Linux Kernel の fs/proc/base.c における重要な I/O 統計を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2495	2012-12-21 16:43	2012-06-13	Show	GitHub Exploit DB Packet Storm

228427	4.9	警告	VMware Linux レッドハット	-	Linux kernel の gfs2_fallocate 関数におけるサービス運用妨害 (バグおよびシステムクラッシュ）の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2689	2012-12-21 16:42	2011-07-21	Show	GitHub Exploit DB Packet Storm

228428	7.2	危険	VMware Linux	-	Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2525	2012-12-21 16:41	2012-02-2	Show	GitHub Exploit DB Packet Storm

228429	7.6	危険	アップル VMware サン・マイクロシステムズヒューレット・パッカードレッドハット	-	複数の Oracle 製品の Java Runtime Environment における脆弱性	CWE-noinfo 情報不足	CVE-2010-4422	2012-12-21 16:38	2011-02-15	Show	GitHub Exploit DB Packet Storm

228430	5.1	警告	サン・マイクロシステムズヒューレット・パッカードオラクル VMware 日立レッドハット	-	複数の Oracle 製品の Networking コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3574	2012-12-21 16:37	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
207561	5.3	MEDIUM Network	google	android	An issue was discovered in the GPS daemon on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (non-Qualcomm chipsets) software. Attackers can obtain sensitive location information because the …	NVD-CWE-noinfo	CVE-2020-35552	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207562	9.8	CRITICAL Network	google	android	An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB w…	CWE-294 Authentication Bypass by Capture-replay	CVE-2020-35551	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207563	9.8	CRITICAL Network	google	android	An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via StatusBar. The Samsung ID is SVE-2020-178…	NVD-CWE-noinfo	CVE-2020-35550	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207564	5.5	MEDIUM Local	google	android	An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SV…	NVD-CWE-noinfo	CVE-2020-35549	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207565	5.5	MEDIUM Local	google	android	An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (D…	NVD-CWE-noinfo	CVE-2020-35548	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207566	5.3	MEDIUM Network	mediawiki debian fedoraproject	mediawiki debian_linux fedora	An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the vi…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-35480	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207567	6.1	MEDIUM Network	mediawiki debian fedoraproject	mediawiki debian_linux fedora	MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is alway…	CWE-79 Cross-site Scripting	CVE-2020-35479	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207568	6.1	MEDIUM Network	mediawiki fedoraproject	mediawiki fedora	MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki …	CWE-79 Cross-site Scripting	CVE-2020-35478	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207569	5.3	MEDIUM Network	mediawiki debian fedoraproject	mediawiki debian_linux fedora	MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggl…	CWE-670 Always-Incorrect Control Flow Implementation	CVE-2020-35477	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

207570	7.5	HIGH Network	mediawiki debian fedoraproject	mediawiki debian_linux fedora	In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to ch…	CWE-79 Cross-site Scripting	CVE-2020-35475	2024-11-21 14:27	2020-12-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed