Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249681	2.1	注意	Linux	-	Linux kernel の eql_g_master_cfg におけるカーネルスタックメモリから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3297	2012-03-27 18:42	2010-09-30	Show	GitHub Exploit DB Packet Storm

249682	4.3	警告	pecl-php	-	APC 拡張の apc.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3294	2012-03-27 18:42	2010-09-24	Show	GitHub Exploit DB Packet Storm

249683	4.3	警告	ヒューレット・パッカード	-	HP AssetCenter および AssetManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3291	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

249684	6.5	警告	ヒューレット・パッカード	-	HP SIM における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-3290	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

249685	4.3	警告	ヒューレット・パッカード	-	HP SIM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3289	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

249686	6.8	警告	ヒューレット・パッカード	-	HP SIM におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3288	2012-03-27 18:42	2010-10-18	Show	GitHub Exploit DB Packet Storm

249687	8.3	危険	ヒューレット・パッカード	-	複数の HP 製品における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3287	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249688	5	警告	ヒューレット・パッカード	-	HP SIM における任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2010-3286	2012-03-27 18:42	2010-10-13	Show	GitHub Exploit DB Packet Storm

249689	5	警告	ヒューレット・パッカード	-	HP OV NNM におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3285	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

249690	4.3	警告	ヒューレット・パッカード	-	HP SMH における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3284	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197181	3.3	LOW Local	pulsesecure	pulse_secure_desktop	Pulse Secure Desktop Client 9.0Rx before 9.0R5 and 9.1Rx before 9.1R4 on Windows reveals users' passwords if Save Settings is enabled.	CWE-521 Weak Password Requirements	CVE-2020-8956	2024-11-21 14:39	2020-10-27	Show	GitHub Exploit DB Packet Storm

197182	5.3	MEDIUM Network	google	tink	A mis-handling of invalid unicode characters in the Java implementation of Tink versions prior to 1.5 allows an attacker to change the ID part of a ciphertext, which result in the creation of a secon…	NVD-CWE-Other	CVE-2020-8929	2024-11-21 14:39	2020-10-19	Show	GitHub Exploit DB Packet Storm

197183	5.4	MEDIUM Network	webmin	webmin	An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML code into the Command field and submit it. Then, after visitin…	CWE-79 Cross-site Scripting	CVE-2020-8821	2024-11-21 14:39	2020-10-13	Show	GitHub Exploit DB Packet Storm

197184	5.4	MEDIUM Network	webmin	webmin	An XSS Vulnerability exists in Webmin 1.941 and earlier affecting the Cluster Shell Commands Endpoint. A user may enter any XSS Payload into the Command field and execute it. Then, after revisiting t…	CWE-79 Cross-site Scripting	CVE-2020-8820	2024-11-21 14:39	2020-10-13	Show	GitHub Exploit DB Packet Storm

197185	5.5	MEDIUM Local	huawei	taurus-al00a_firmware	Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due t…	CWE-125 Out-of-bounds Read	CVE-2020-9087	2024-11-21 14:39	2020-10-12	Show	GitHub Exploit DB Packet Storm

197186	8.1	HIGH Adjacent	johnsoncontrols tyco	victor_web_client c-cure_web_client	A vulnerability in specified versions of American Dynamics victor Web Client and Software House CCURE Web Client could allow a remote unauthenticated attacker on the network to delete arbitrary files…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-9048	2024-11-21 14:39	2020-10-9	Show	GitHub Exploit DB Packet Storm

197187	9.8	CRITICAL Network	sierrawireless	aleos	Unauthenticated RPC server on ALEOS before 4.4.9, 4.9.5, and 4.14.0 allows remote code execution.	NVD-CWE-noinfo	CVE-2020-8782	2024-11-21 14:39	2020-10-6	Show	GitHub Exploit DB Packet Storm

197188	7.8	HIGH Local	sierrawireless	aleos	Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process.	NVD-CWE-noinfo	CVE-2020-8781	2024-11-21 14:39	2020-10-6	Show	GitHub Exploit DB Packet Storm

197189	5.5	MEDIUM Local	intel	bios	Insufficient control flow management in BIOS firmware 8th, 9th Generation Intel(R) Core(TM) Processors and Intel(R) Celeron(R) Processor 4000 Series may allow an authenticated user to potentially ena…	NVD-CWE-noinfo	CVE-2020-8671	2024-11-21 14:39	2020-10-5	Show	GitHub Exploit DB Packet Storm

197190	7.5	HIGH Network	telestream	sentry medius	Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=l…	CWE-89 SQL Injection	CVE-2020-8887	2024-11-21 14:39	2020-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed