Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244661 7.5 危険 Chipmunk Scripts - Chipmunk Blogger Script における管理者権限を取得される脆弱性 CWE-16
CWE-264
CVE-2009-0399 2012-06-26 16:10 2009-02-3 Show GitHub Exploit DB Packet Storm
244662 7.2 危険 enomaly - ECP における任意のプロセスにシグナルを送信される脆弱性 CWE-94
コード・インジェクション
CVE-2009-0390 2012-06-26 16:10 2009-02-2 Show GitHub Exploit DB Packet Storm
244663 9.3 危険 eztools-software - WOW ActiveX 2 の WOW ActiveX コントロールにおける任意のファイルを上書きされる脆弱性 CWE-Other
その他
CVE-2009-0389 2012-06-26 16:10 2009-02-2 Show GitHub Exploit DB Packet Storm
244664 6.8 警告 adam tomecek - OwnRS CMS の autor.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0384 2012-06-26 16:10 2009-02-2 Show GitHub Exploit DB Packet Storm
244665 7.5 危険 bazaarbuilder
Joomla!
- Joomla! の BazaarBuilder Ecommerce Shopping Cart コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0381 2012-06-26 16:10 2009-02-2 Show GitHub Exploit DB Packet Storm
244666 7.5 危険 Joomla!
elearningforce
- Joomla! の ElearningForce flashmagazinedeluxe コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-0373 2012-06-26 16:10 2009-01-30 Show GitHub Exploit DB Packet Storm
244667 7.5 危険 citadel - Citadel.org WebCit の mini_calendar コンポーネントにおける任意のコードを実行される脆弱性 CWE-134
書式文字列の問題
CVE-2009-0364 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
244668 7.5 危険 Ktools.net LLC. - BarnOwl および owl におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0363 2012-06-26 16:10 2009-02-17 Show GitHub Exploit DB Packet Storm
244669 4 警告 Fail2ban - Fail2ban の filter.d/wuftpd.conf におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2009-0362 2012-06-26 16:10 2009-02-12 Show GitHub Exploit DB Packet Storm
244670 9.3 危険 FTPShell - FTPShell Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-0349 2012-06-26 16:10 2009-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218301 9.8 CRITICAL
Network
dronecode micro_air_vehicle_link The Micro Air Vehicle Link (MAVLink) protocol presents no authentication mechanism on its version 1.0 (nor authorization) whichs leads to a variety of attacks including identity spoofing, unauthorize… CWE-306
Missing Authentication for Critical Function
CVE-2020-10282 2024-11-21 13:55 2020-07-4 Show GitHub Exploit DB Packet Storm
218302 7.5 HIGH
Network
dronecode micro_air_vehicle_link This vulnerability applies to the Micro Air Vehicle Link (MAVLink) protocol and allows a remote attacker to gain access to sensitive information provided it has access to the communication medium. MA… CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-10281 2024-11-21 13:55 2020-07-4 Show GitHub Exploit DB Packet Storm
218303 7.5 HIGH
Network
honeywell controledge_plc_firmware
controledge_rtu_firmware
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes unencrypted passwords on the network. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-10628 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
218304 7.5 HIGH
Network
honeywell controledge_plc_firmware
controledge_rtu_firmware
ControlEdge PLC (R130.2, R140, R150, and R151) and RTU (R101, R110, R140, R150, and R151) exposes a session token on the network. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-10624 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
218305 5.5 MEDIUM
Local
apache
netapp
activemq_artemis
oncommand_workflow_automation
A flaw was found in ActiveMQ Artemis management API from version 2.7.0 up until 2.12.0, where a user inadvertently stores passwords in plaintext in the Artemis shadow file (etc/artemis-users.properti… CWE-312
CWE-522
 Cleartext Storage of Sensitive Information
 Insufficiently Protected Credentials
CVE-2020-10727 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
218306 6.5 MEDIUM
Network
redhat
fedoraproject
opensuse
linuxfoundation
canonical
ceph_storage
openstack
fedora
leap
ceph
ubuntu_linux
A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline character in the Exp… CWE-74
Injection
CVE-2020-10753 2024-11-21 13:55 2020-06-27 Show GitHub Exploit DB Packet Storm
218307 7.8 HIGH
Local
python
fedoraproject
canonical
pillow
fedora
ubuntu_linux
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c. CWE-120
Classic Buffer Overflow
CVE-2020-10379 2024-11-21 13:55 2020-06-26 Show GitHub Exploit DB Packet Storm
218308 5.5 MEDIUM
Local
python
fedoraproject
canonical
pillow
fedora
ubuntu_linux
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer. CWE-125
Out-of-bounds Read
CVE-2020-10378 2024-11-21 13:55 2020-06-26 Show GitHub Exploit DB Packet Storm
218309 9.8 CRITICAL
Network
mi mijia_inkjet_printer_firmware An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in command execution vulnerabilities. CWE-77
Command Injection
CVE-2020-10561 2024-11-21 13:55 2020-06-25 Show GitHub Exploit DB Packet Storm
218310 7.5 HIGH
Network
mobile-industrial-robots
easyrobotics
uvd-robots
mir100_firmware
mir200_firmware
mir250_firmware
mir500_firmware
mir1000_firmware
er200_firmware
er-lite_firmware
er-flex_firmware
er-one_firmware
uvd_firmware
The Apache server on port 80 that host the web interface is vulnerable to a DoS by spamming incomplete HTTP headers, effectively blocking the access to the dashboard. CWE-404
 Improper Resource Shutdown or Release
CVE-2020-10280 2024-11-21 13:55 2020-06-24 Show GitHub Exploit DB Packet Storm