Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251371	4.3	警告	IBM	-	IBM WebSphere Commerce におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2636	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

251372	6.5	警告	IBM	-	IBM WebSphere Commerce における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2635	2012-03-27 18:42	2010-11-9	Show	GitHub Exploit DB Packet Storm

251373	9.3	危険	SAP	-	SAP Crystal Reports の CrystalPrintControl ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2590	2012-03-27 18:42	2010-12-21	Show	GitHub Exploit DB Packet Storm

251374	9.3	危険	Nullsoft	-	Winamp の in_nsv.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2586	2012-03-27 18:42	2010-11-27	Show	GitHub Exploit DB Packet Storm

251375	10	危険	realpage	-	RealPage Module の Upload ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2585	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251376	5	警告	realpage	-	RealPage Module ActiveX コントロールの Upload メソッドにおける任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2584	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251377	5.1	警告	daniel friesel	-	feh における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-2246	2012-03-27 18:42	2011-05-26	Show	GitHub Exploit DB Packet Storm

251378	9.3	危険	SonicWALL	-	SonicWALL SSL-VPN End-Point におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2583	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

251379	5	警告	MailEnable	-	MailEnable の SMTP サービス (MESMTPC.exe) におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2580	2012-03-27 18:42	2010-09-13	Show	GitHub Exploit DB Packet Storm

251380	4.7	警告	Linux	-	Linux kernel の btrfs_ioctl_clone 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2538	2012-03-27 18:42	2010-09-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208581	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. T…	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25803	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208582	3.2	LOW Local	qemu redhat	qemu enterprise_linux openstack_platform	hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.	CWE-476 NULL Pointer Dereference	CVE-2020-25743	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208583	3.2	LOW Local	qemu	qemu	pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.	CWE-476 NULL Pointer Dereference	CVE-2020-25742	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

208584	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: …	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25802	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208585	7.5	HIGH Network	redhat netapp	wildfly_openssl jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid openshift_application_runtimes data_grid oncommand_workflow_automation oncomman…	A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-25644	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208586	7.2	HIGH Network	linux redhat opensuse debian netapp starwindsoftware	linux_kernel enterprise_linux leap debian_linux h410c_firmware starwind_virtual_san	A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function wh…	-	CVE-2020-25643	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208587	5.5	MEDIUM Local	linux redhat opensuse debian canonical	linux_kernel enterprise_linux leap debian_linux ubuntu_linux	A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loo…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-25641	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208588	6.7	MEDIUM Local	redhat opensuse	libvirt leap	A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects…	-	CVE-2020-25637	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208589	7.5	HIGH Network	ruby-lang fedoraproject	ruby webrick fedora	An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigoro…	CWE-444 HTTP Request Smuggling	CVE-2020-25613	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

208590	5.5	MEDIUM Local	redhat	ansible	A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Th…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-25635	2024-11-21 14:18	2020-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed