Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249431	9	危険	ヒューレット・パッカード	-	HP Insight Control Server Migration における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3992	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249432	10	危険	Novell	-	SUSE Linux Enterprise の supportconfig スクリプトにおける脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-3912	2012-03-27 18:42	2011-01-12	Show	GitHub Exploit DB Packet Storm

249433	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Server Migration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3991	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249434	5	警告	ヒューレット・パッカード	-	HP Virtual Server Environment における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3990	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249435	6.8	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3989	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249436	5	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるアクセス制限を回避する脆弱性	CWE-noinfo 情報不足	CVE-2010-3988	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249437	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Virtual Machine Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3987	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249438	5	警告	ヒューレット・パッカード	-	HP VCEM における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3986	2012-03-27 18:42	2010-10-21	Show	GitHub Exploit DB Packet Storm

249439	4.3	警告	ヒューレット・パッカード	-	HP Operations Orchestration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3985	2012-03-27 18:42	2010-10-20	Show	GitHub Exploit DB Packet Storm

249440	9	危険	SAP	-	SAP BusinessObjects Enterprise の CmcApp における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3983	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199881	5.9	MEDIUM Network	pivotal	reactor_netty	The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. I…	CWE-522 Insufficiently Protected Credentials	CVE-2020-5404	2024-11-21 14:34	2020-03-4	Show	GitHub Exploit DB Packet Storm

199882	6.5	MEDIUM Network	grandit	grandit	GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the informa…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-5539	2024-11-21 14:34	2020-03-2	Show	GitHub Exploit DB Packet Storm

199883	8.8	HIGH Network	cloudfoundry	cf-deployment user_account_and_authentication	In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity pr…	CWE-352 Origin Validation Error	CVE-2020-5402	2024-11-21 14:34	2020-02-28	Show	GitHub Exploit DB Packet Storm

199884	5.3	MEDIUM Network	cloudfoundry	routing_release	Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients try…	CWE-444 HTTP Request Smuggling	CVE-2020-5401	2024-11-21 14:34	2020-02-28	Show	GitHub Exploit DB Packet Storm

199885	6.5	MEDIUM Network	cloudfoundry	cf-deployment capi-release	Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the j…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-5400	2024-11-21 14:34	2020-02-28	Show	GitHub Exploit DB Packet Storm

199886	8.8	HIGH Adjacent	nec	aterm_wg2600hs_firmware aterm_wf1200c_firmware aterm_wg1200cr_firmware	Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment t…	CWE-78 OS Command	CVE-2020-5524	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199887	8.0	HIGH Adjacent	nec	aterm_wg2600hs_firmware	Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.	CWE-78 OS Command	CVE-2020-5534	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199888	6.1	MEDIUM Network	nec	aterm_wg2600hs_firmware	Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2020-5533	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199889	8.0	HIGH Adjacent	nec	aterm_wg2600hs_firmware aterm_wf1200c_firmware aterm_wg1200cr_firmware	Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same net…	CWE-78 OS Command	CVE-2020-5525	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199890	8.8	HIGH Network	realestateconnected	easy_property_listings	Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.	CWE-352 Origin Validation Error	CVE-2020-5530	2024-11-21 14:34	2020-02-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed