Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251571 6.9 警告 Google - Android における Manifest.permission.CAMER および Manifest.permission.AUDIO_RECORD の設定を回避される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2348 2011-02-23 15:19 2009-05-26 Show GitHub Exploit DB Packet Storm
251572 7.5 危険 Google - Android の PackageManagerService クラスにおけるアプリケーションのデータにアクセスされる脆弱性 CWE-287
不適切な認証
CVE-2009-1754 2011-02-23 15:17 2009-05-26 Show GitHub Exploit DB Packet Storm
251573 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイス上で稼働する emWEB におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4677 2011-02-23 15:14 2011-01-7 Show GitHub Exploit DB Packet Storm
251574 6.8 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4676 2011-02-23 15:11 2011-01-7 Show GitHub Exploit DB Packet Storm
251575 9 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4675 2011-02-23 15:09 2011-01-7 Show GitHub Exploit DB Packet Storm
251576 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4673 2011-02-23 15:05 2011-01-7 Show GitHub Exploit DB Packet Storm
251577 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4672 2011-02-23 14:59 2011-01-7 Show GitHub Exploit DB Packet Storm
251578 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5037 2011-02-23 14:56 2011-01-7 Show GitHub Exploit DB Packet Storm
251579 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4692 2011-02-23 14:54 2011-01-7 Show GitHub Exploit DB Packet Storm
251580 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4691 2011-02-23 14:50 2011-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199891 9.8 CRITICAL
Network
s3-kilatstorage_project s3-kilatstorage This affects all versions of package s3-kilatstorage. CWE-78
OS Command 
CVE-2020-28424 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199892 9.8 CRITICAL
Network
monorepo-build_project monorepo-build This affects all versions of package monorepo-build. CWE-77
Command Injection
CVE-2020-28423 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
199893 9.8 CRITICAL
Network
properties-reader_project properties-reader This affects the package properties-reader before 2.2.0. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28471 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199894 9.8 CRITICAL
Network
ion-parser_project ion-parser This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28462 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199895 9.8 CRITICAL
Network
js-ini_project js-ini This affects the package js-ini before 1.3.0. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can be… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28461 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199896 6.1 MEDIUM
Network
markdown-it-decorate_project markdown-it-decorate This affects all versions of package markdown-it-decorate. An attacker can add an event handler or use javascript:xxx for the link. CWE-79
Cross-site Scripting
CVE-2020-28459 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199897 6.1 MEDIUM
Network
markdown-it-toc_project markdown-it-toc This affects all versions of package markdown-it-toc. The title of the generated toc and the contents of the header are not escaped. CWE-79
Cross-site Scripting
CVE-2020-28455 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199898 9.8 CRITICAL
Network
xopen_project xopen This affects all versions of package xopen. The injection point is located in line 14 in index.js in the exported function xopen(filepath) CWE-77
Command Injection
CVE-2020-28447 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199899 9.8 CRITICAL
Network
ntesseract_project ntesseract The package ntesseract before 0.2.9 are vulnerable to Command Injection via lib/tesseract.js. CWE-77
Command Injection
CVE-2020-28446 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
199900 9.8 CRITICAL
Network
npm-help_project npm-help This affects all versions of package npm-help. The injection point is located in line 13 in index.js file in export.latestVersion() function. CWE-77
Command Injection
CVE-2020-28445 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm