Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252291	7.5	危険	アップルサイバートラスト株式会社 The PHP Group ターボリナックスヒューレット・パッカードレッドハット	-	PHP における exif のチェックに関する脆弱性	CWE-noinfo 情報不足	CVE-2009-3292	2010-12-15 12:41	2009-09-16	Show	GitHub Exploit DB Packet Storm

252292	7.5	危険	アップルサイバートラスト株式会社 The PHP Group ターボリナックスヒューレット・パッカードレッドハット	-	PHP の php_openssl_apply_verification_policy 関数における証明書の検証処理に関する脆弱性	CWE-20 不適切な入力確認	CVE-2009-3291	2010-12-15 12:40	2009-09-16	Show	GitHub Exploit DB Packet Storm

252293	4.3	警告	The PHP Group サイバートラスト株式会社ターボリナックスヒューレット・パッカードレッドハット	-	PHP の exif_read_data 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-2687	2010-12-15 12:39	2009-08-5	Show	GitHub Exploit DB Packet Storm

252294	9.3	危険	アップルサイバートラスト株式会社レッドハットオラクル Info-ZIP	-	UnZip の NEEDBITS マクロにおける無効なバッファ領域を参照してしまう問題	CWE-119 バッファエラー	CVE-2008-0888	2010-12-15 12:37	2008-03-17	Show	GitHub Exploit DB Packet Storm

252295	6	警告	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Tcl コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1170	2010-12-15 12:35	2010-05-17	Show	GitHub Exploit DB Packet Storm

252296	8.5	危険	PostgreSQL.org サイバートラスト株式会社レッドハットターボリナックスオラクル	-	PostgreSQL における任意の Perl コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1169	2010-12-15 12:31	2010-05-17	Show	GitHub Exploit DB Packet Storm

252297	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3753	2010-12-14 14:24	2010-09-27	Show	GitHub Exploit DB Packet Storm

252298	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2010-3752	2010-12-14 14:22	2010-09-27	Show	GitHub Exploit DB Packet Storm

252299	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3308	2010-12-14 14:20	2010-09-27	Show	GitHub Exploit DB Packet Storm

252300	6.5	警告	Openswan レッドハット	-	Openswan のクライアント内にある programs/pluto/xauth.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3302	2010-12-14 14:15	2010-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197231	7.5	HIGH Network	ibm	aspera_high-speed_transfer_server_for_cloud_pak_for_integration aspera_shares_on_demand aspera_server_on_demand aspera_faspex_on_demand aspera_application_platform_on_demand aspera_tra…	Certain IBM Aspera applications are vulnerable to arbitrary memory corruption based on the product configuration, which could allow an attacker with intimate knowledge of the system to execute arbitr…	CWE-787 Out-of-bounds Write	CVE-2020-4435	2024-11-21 14:32	2020-06-10	Show	GitHub Exploit DB Packet Storm

197232	7.5	HIGH Network	ibm	aspera_high-speed_transfer_server_for_cloud_pak_for_integration aspera_shares_on_demand aspera_server_on_demand aspera_faspex_on_demand aspera_application_platform_on_demand aspera_tra…	Certain IBM Aspera applications are vulnerable to buffer overflow based on the product configuration and valid authentication, which could allow an attacker with intimate knowledge of the system to e…	CWE-120 Classic Buffer Overflow	CVE-2020-4434	2024-11-21 14:32	2020-06-10	Show	GitHub Exploit DB Packet Storm

197233	7.5	HIGH Network	ibm	aspera_high-speed_transfer_server_for_cloud_pak_for_integration aspera_shares_on_demand aspera_server_on_demand aspera_faspex_on_demand aspera_application_platform_on_demand aspera_tra…	Certain IBM Aspera applications are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker with intimate knowledge of the server to execut…	CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write	CVE-2020-4433	2024-11-21 14:32	2020-06-10	Show	GitHub Exploit DB Packet Storm

197234	7.5	HIGH Network	ibm	aspera_high-speed_transfer_server_for_cloud_pak_for_integration aspera_shares_on_demand aspera_server_on_demand aspera_faspex_on_demand aspera_application_platform_on_demand aspera_tra…	Certain IBM Aspera applications are vulnerable to command injection after valid authentication, which could allow an attacker with intimate knowledge of the system to execute commands in a SOAP API. …	CWE-77 Command Injection	CVE-2020-4432	2024-11-21 14:32	2020-06-10	Show	GitHub Exploit DB Packet Storm

197235	6.1	MEDIUM Network	boltcms	bolt	In Bolt CMS before version 3.7.1, the filename of uploaded files was vulnerable to stored XSS. It is not possible to inject javascript code in the file name when creating/uploading the file. But, onc…	CWE-79 Cross-site Scripting	CVE-2020-4041	2024-11-21 14:32	2020-06-9	Show	GitHub Exploit DB Packet Storm

197236	4.3	MEDIUM Network	boltcms	bolt	Bolt CMS before version 3.7.1 lacked CSRF protection in the preview generating endpoint. Previews are intended to be generated by the admins, developers, chief-editors, and editors, who are authorize…	-	CVE-2020-4040	2024-11-21 14:32	2020-06-9	Show	GitHub Exploit DB Packet Storm

197237	7.4	HIGH Network	prisma	graphql-playground-middleware-hapi graphql-playground-middleware-lambda graphql-playground-middleware-koa graphql-playground-middleware-express graphql-playground-html	GraphQL Playground (graphql-playground-html NPM package) before version 1.6.22 have a severe XSS Reflection attack vulnerability. All unsanitized user input passed into renderPlaygroundPage() method …	-	CVE-2020-4038	2024-11-21 14:32	2020-06-9	Show	GitHub Exploit DB Packet Storm

197238	7.4	HIGH Network	ibm	maximo_asset_management	IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially le…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-4529	2024-11-21 14:32	2020-06-8	Show	GitHub Exploit DB Packet Storm

197239	9.8	CRITICAL Network	ibm	websphere_application_server	IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects. IBM X-Force ID:…	CWE-502 Deserialization of Untrusted Data	CVE-2020-4450	2024-11-21 14:32	2020-06-6	Show	GitHub Exploit DB Packet Storm

197240	7.5	HIGH Network	ibm	websphere_application_server	IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to obtain sensitive information with a specially-crafted sequence of serialized objects. IBM X-Force …	CWE-502 Deserialization of Untrusted Data	CVE-2020-4449	2024-11-21 14:32	2020-06-6	Show	GitHub Exploit DB Packet Storm