Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228601	5	警告	サン・マイクロシステムズ	-	Sun Java SE の Java Web Start 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2719	2012-12-20 19:10	2009-08-10	Show	GitHub Exploit DB Packet Storm

228602	6.8	警告	サン・マイクロシステムズ	-	Sun Java SE の AWT 実装におけるユーザに信頼されないアプレットと保護されない通信をさせる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2718	2012-12-20 19:10	2009-08-10	Show	GitHub Exploit DB Packet Storm

228603	6.8	警告	サン・マイクロシステムズ	-	Windows 上で稼動している Sun Java SE の AWT 実装におけるユーザに信頼されないアプレットと保護されない通信をさせる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2717	2012-12-20 19:10	2009-08-10	Show	GitHub Exploit DB Packet Storm

228604	7.5	危険	サン・マイクロシステムズ	-	Sun Java SE のプラグイン機能における "古い zip および証明書処理" の脆弱性を悪用される脆弱性	CWE-noinfo 情報不足	CVE-2009-2716	2012-12-20 19:10	2009-08-10	Show	GitHub Exploit DB Packet Storm

228605	4.9	警告	サン・マイクロシステムズ	-	Sun VirtualBox におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2715	2012-12-20 19:10	2009-08-7	Show	GitHub Exploit DB Packet Storm

228606	4.9	警告	サン・マイクロシステムズ	-	Sun VirtualBox におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2714	2012-12-20 19:10	2009-08-5	Show	GitHub Exploit DB Packet Storm

228607	4.3	警告	サン・マイクロシステムズ	-	Sun Java System Access Manager の CDCServlet コンポーネントにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-2713	2012-12-20 19:10	2009-08-5	Show	GitHub Exploit DB Packet Storm

228608	2.1	注意	サン・マイクロシステムズ	-	Sun Java System Access Manager および OpenSSO Enterprise などにおける平文パスワードを特定される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2712	2012-12-20 19:10	2009-08-5	Show	GitHub Exploit DB Packet Storm

228609	5	警告	strongSwan	-	strongSwan の asn1_length 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2009-2661	2012-12-20 19:10	2009-07-23	Show	GitHub Exploit DB Packet Storm

228610	7.5	危険	ZNC	-	ZNC におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-2658	2012-12-20 19:10	2009-08-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208141	3.2	LOW Local	qemu	qemu	pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.	CWE-476 NULL Pointer Dereference	CVE-2020-25742	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208142	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: …	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25802	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208143	7.5	HIGH Network	redhat netapp	wildfly_openssl jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid openshift_application_runtimes data_grid oncommand_workflow_automation oncomman…	A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-25644	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208144	7.2	HIGH Network	linux redhat opensuse debian netapp starwindsoftware	linux_kernel enterprise_linux leap debian_linux h410c_firmware starwind_virtual_san	A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function wh…	-	CVE-2020-25643	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208145	5.5	MEDIUM Local	linux redhat opensuse debian canonical	linux_kernel enterprise_linux leap debian_linux ubuntu_linux	A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loo…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-25641	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208146	6.7	MEDIUM Local	redhat opensuse	libvirt leap	A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects…	-	CVE-2020-25637	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208147	7.5	HIGH Network	ruby-lang fedoraproject	ruby webrick fedora	An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigoro…	CWE-444 HTTP Request Smuggling	CVE-2020-25613	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208148	5.5	MEDIUM Local	redhat	ansible	A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Th…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-25635	2024-11-21 14:18	2020-10-5	Show	GitHub Exploit DB Packet Storm

208149	7.1	HIGH Local	redhat	ansible	A flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to hav…	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-25636	2024-11-21 14:18	2020-10-5	Show	GitHub Exploit DB Packet Storm

208150	7.8	HIGH Local	trendmicro	antivirus	Trend Micro Antivirus for Mac 2020 (Consumer) is vulnerable to a symbolic link privilege escalation attack where an attacker could exploit a critical file on the system to escalate their privileges. …	CWE-59 Link Following	CVE-2020-25776	2024-11-21 14:18	2020-10-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed