Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250381	4.3	警告	html-edit	-	Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4610	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250382	7.5	危険	html-edit	-	Html-edit CMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4609	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250383	5	警告	habariproject	-	Habari における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4608	2012-03-27 18:42	2010-12-4	Show	GitHub Exploit DB Packet Storm

250384	2.6	注意	habariproject	-	Habari におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4607	2012-03-27 18:42	2010-12-4	Show	GitHub Exploit DB Packet Storm

250385	10	危険	IBM	-	IBM TSM の Space Management クライアントにおける任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4606	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250386	6.6	警告	IBM	-	IBM TSM の backup-archive クライアントにおける任意のファイルを上書される脆弱性	CWE-noinfo 情報不足	CVE-2010-4605	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250387	6.9	警告	IBM	-	IBM TSM の GeneratePassword 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4604	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250388	6.5	警告	IBM	-	IBM Rational ClearQuest におけるレコードリレーションシップに干渉する脆弱性	CWE-DesignError	CVE-2010-4603	2012-03-27 18:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

250389	4	警告	IBM	-	IBM Rational ClearQuest の Web クライアントにおける restricted user の制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4602	2012-03-27 18:42	2010-08-9	Show	GitHub Exploit DB Packet Storm

250390	5	警告	The Dojo Foundation IBM	-	IBM Rational ClearQuest のWeb クライアントで使用される Dojo Toolkit におけるクッキーを読まれる脆弱性	CWE-200 情報漏えい	CVE-2010-4600	2012-03-27 18:42	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209471	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique fro…	NVD-CWE-noinfo	CVE-2020-1411	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209472	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim open…	NVD-CWE-noinfo	CVE-2020-1410	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209473	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1409	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209474	8.8	HIGH Network	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Microsoft Graphics Remote Code Execution Vulnerability'.	CWE-346 Origin Validation Error	CVE-2020-1408	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209475	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u…	NVD-CWE-noinfo	CVE-2020-1407	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209476	7.8	HIGH Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of Privilege Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1406	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209477	7.1	HIGH Local	microsoft	windows_server_2019 windows_10 windows_server_2016	An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Pri…	NVD-CWE-noinfo	CVE-2020-1405	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209478	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV…	NVD-CWE-noinfo	CVE-2020-1404	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209479	7.5	HIGH Network	microsoft	internet_explorer	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1403	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

209480	7.8	HIGH Local	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on th…	NVD-CWE-noinfo	CVE-2020-1402	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed