Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252351	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web Monitor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2733	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252352	5.8	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Web インターフェースにおける任意の Web サイトへリダイレクトされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2732	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

252353	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の AES および RC4 の復号化機能における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4212	2010-12-7 16:40	2010-01-12	Show	GitHub Exploit DB Packet Storm

252354	10	危険	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	MIT Kerberos の asn1_decode_generaltime 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0846	2010-12-7 16:39	2009-04-7	Show	GitHub Exploit DB Packet Storm

252355	5	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の spnego_gss_accept_sec_context 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-0845	2010-12-7 16:38	2009-03-27	Show	GitHub Exploit DB Packet Storm

252356	5.8	警告	アップルサイバートラスト株式会社 MIT Kerberos サン・マイクロシステムズ VMware レッドハット	-	MIT Kerberos の SPNEGO 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-0844	2010-12-7 16:38	2009-04-7	Show	GitHub Exploit DB Packet Storm

252357	4	警告	Pidgin レッドハット	-	Pidgin の libpurple におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3711	2010-12-7 15:44	2010-05-12	Show	GitHub Exploit DB Packet Storm

252358	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3336	2010-12-6 16:51	2010-11-9	Show	GitHub Exploit DB Packet Storm

252359	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2573	2010-12-6 16:30	2010-11-9	Show	GitHub Exploit DB Packet Storm

252360	9.3	危険	マイクロソフト	-	Microsoft Office における権限昇格の脆弱性	CWE-Other その他	CVE-2010-3337	2010-12-6 15:44	2010-08-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200341	5.3	MEDIUM Network	p11-kit_project	p11-kit	An issue was discovered in p11-kit 0.21.1 through 0.23.21. A heap-based buffer over-read has been discovered in the RPC protocol used by thep11-kit server/remote commands and the client library. When…	CWE-125 Out-of-bounds Read	CVE-2020-29362	2024-11-21 14:23	2020-12-16	Show	GitHub Exploit DB Packet Storm

200342	7.5	HIGH Network	p11-kit_project debian	p11-kit debian_linux	An issue was discovered in p11-kit 0.21.1 through 0.23.21. Multiple integer overflows have been discovered in the array allocations in the p11-kit library and the p11-kit list command, where overflow…	CWE-190 Integer Overflow or Wraparound	CVE-2020-29361	2024-11-21 14:23	2020-12-16	Show	GitHub Exploit DB Packet Storm

200343	6.1	MEDIUM Network	directoriespro	directories_pro	A cross-site scripting (XSS) vulnerability exists in the SabaiApps WordPress Directories Pro plugin version 1.3.45 and previous, allows attackers who have convinced a site administrator to import a s…	CWE-79 Cross-site Scripting	CVE-2020-29304	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200344	6.1	MEDIUM Network	directoriespro	directories_pro	A cross-site scripting (XSS) vulnerability in the SabaiApp Directories Pro plugin 1.3.45 for WordPress allows remote attackers to inject arbitrary web script or HTML via a POST to /wp-admin/admin.php…	CWE-79 Cross-site Scripting	CVE-2020-29303	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200345	5.3	MEDIUM Network	openasset	digital_asset_management	OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sens…	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2020-28861	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200346	8.8	HIGH Network	openasset	digital_asset_management	OpenAssetDigital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input, incorporating it into its SQL queries, allowing for authenticated blind SQL injection.	CWE-89 SQL Injection	CVE-2020-28860	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200347	6.1	MEDIUM Network	openasset	digital_asset_management	OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks.	CWE-79 Cross-site Scripting	CVE-2020-28859	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200348	8.8	HIGH Network	openasset	digital_asset_management	OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly verify whether a request made to the application was intentionally made by the user, allowing for cross-site request forger…	CWE-352 Origin Validation Error	CVE-2020-28858	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200349	6.1	MEDIUM Network	openasset	digital_asset_management	OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks.	CWE-79 Cross-site Scripting	CVE-2020-28857	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm

200350	7.5	HIGH Network	openasset	digital_asset_management	OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly determine the HTTP request's originating IP address, allowing attackers to spoof it using X-Forwarded-For in the header, by…	CWE-290 Authentication Bypass by Spoofing	CVE-2020-28856	2024-11-21 14:23	2020-12-15	Show	GitHub Exploit DB Packet Storm