Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252131	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2997	2011-01-7 15:33	2010-12-10	Show	GitHub Exploit DB Packet Storm

252132	2.6	注意	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2964	2011-01-7 11:03	2009-08-12	Show	GitHub Exploit DB Packet Storm

252133	4.3	警告	レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-1262	2011-01-7 11:02	2007-05-9	Show	GitHub Exploit DB Packet Storm

252134	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer のマルチレートオーディオにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4375	2011-01-6 16:23	2010-12-10	Show	GitHub Exploit DB Packet Storm

252135	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer の RealMedia メディアプロパティーヘッダーにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4384	2011-01-6 16:18	2010-12-10	Show	GitHub Exploit DB Packet Storm

252136	4.3	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の nsAuthSSPI::Unwrap 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0161	2011-01-6 16:01	2010-03-16	Show	GitHub Exploit DB Packet Storm

252137	9.3	危険	Exim Development レッドハット	-	Exim の string_format 関数にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4344	2011-01-6 15:58	2010-12-14	Show	GitHub Exploit DB Packet Storm

252138	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey のレンダリングエンジンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3770	2011-01-6 15:50	2010-12-9	Show	GitHub Exploit DB Packet Storm

252139	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey におけるロケーションバーを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3774	2011-01-6 15:17	2010-12-9	Show	GitHub Exploit DB Packet Storm

252140	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-DesignError	CVE-2010-3773	2011-01-6 15:15	2010-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210391	5.3	MEDIUM Local	zephyrproject	zephyr	Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges (CWE-280). For more in…	NVD-CWE-Other	CVE-2020-10072	2024-11-21 13:54	2021-05-26	Show	GitHub Exploit DB Packet Storm

210392	6.5	MEDIUM Adjacent	zephyrproject	zephyr	Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Parameters (CWE-233). For more information, see https://github.…	NVD-CWE-Other	CVE-2020-10069	2024-11-21 13:54	2021-05-26	Show	GitHub Exploit DB Packet Storm

210393	5.7	MEDIUM Adjacent	zephyrproject	zephyr	Incorrect Error Handling in Bluetooth HCI core. Zephyr versions >= v1.14.2, >= v2.2.0 contain NULL Pointer Dereference (CWE-476). For more information, see https://github.com/zephyrproject-rtos/zephy…	CWE-476 NULL Pointer Dereference	CVE-2020-10066	2024-11-21 13:54	2021-05-26	Show	GitHub Exploit DB Packet Storm

210394	8.8	HIGH Adjacent	zephyrproject	zephyr	Missing Size Checks in Bluetooth HCI over SPI. Zephyr versions >= v1.14.2, >= v2.2.0 contain Improper Handling of Length Parameter Inconsistency (CWE-130). For more information, see https://github.co…	CWE-787 Out-of-bounds Write	CVE-2020-10065	2024-11-21 13:54	2021-05-26	Show	GitHub Exploit DB Packet Storm

210395	9.8	CRITICAL Network	zephyrproject	zephyr	Improper Input Frame Validation in ieee802154 Processing. Zephyr versions >= v1.14.2, >= v2.2.0 contain Stack-based Buffer Overflow (CWE-121), Heap-based Buffer Overflow (CWE-122). For more informati…	CWE-787 Out-of-bounds Write	CVE-2020-10064	2024-11-21 13:54	2021-05-26	Show	GitHub Exploit DB Packet Storm

210396	7.8	HIGH Local	apple	mac_os_x macos	An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, macOS Big Sur …	CWE-787 Out-of-bounds Write	CVE-2020-10015	2024-11-21 13:54	2021-04-3	Show	GitHub Exploit DB Packet Storm

210397	5.5	MEDIUM Local	apple	macos	A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.0.1. A malicious application with root privileges may be able to access private information.	NVD-CWE-noinfo	CVE-2020-10008	2024-11-21 13:54	2021-04-3	Show	GitHub Exploit DB Packet Storm

210398	5.5	MEDIUM Local	apple debian	mac_os_x debian_linux	An input validation issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious appli…	CWE-20 Improper Input Validation	CVE-2020-10001	2024-11-21 13:54	2021-04-3	Show	GitHub Exploit DB Packet Storm

210399	5.5	MEDIUM Local	siemens	simatic_pcs_7 simatic_wincc	A vulnerability has been identified in SIMATIC PCS 7 (All versions), SIMATIC WinCC (All versions < V7.5 SP2). Due to an insecure password verification process, an attacker could bypass the password p…	CWE-287 Improper Authentication	CVE-2020-10048	2024-11-21 13:54	2021-02-10	Show	GitHub Exploit DB Packet Storm

210400	8.1	HIGH Network	amino	ak45x_firmware ak5xx_firmware ak65x_firmware aria6xx_firmware aria7xx_firmware kami7b_firmware	Command Injection in the CPE WAN Management Protocol (CWMP) registration in Amino Communications AK45x series, AK5xx series, AK65x series, Aria6xx series, Aria7/AK7Xx series and Kami7B allows man-in-…	CWE-78 OS Command	CVE-2020-10209	2024-11-21 13:54	2020-12-30	Show	GitHub Exploit DB Packet Storm