Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253141 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253142 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253143 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253144 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
253145 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
253146 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
253147 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 28, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198951 5.6 MEDIUM
Network 		golang
netapp 		go
trident 		The encoding/xml package in Go (all versions) does not correctly preserve the semantics of attribute namespace prefixes during tokenization round-trips, which allows an attacker to craft inputs that … NVD-CWE-Other
CVE-2020-29509 2024-11-21 14:24 2020-12-15 Show GitHub Exploit DB Packet Storm
198952 8.8 HIGH
Network 		macally wifisd2-2a82_firmware In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator acco… CWE-287
Improper Authentication 		CVE-2020-29669 2024-11-21 14:24 2020-12-14 Show GitHub Exploit DB Packet Storm
198953 7.8 HIGH
Local 		westerndigital dashboard Western Digital Dashboard before 3.2.2.9 allows DLL Hijacking that leads to compromise of the SYSTEM account. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-29654 2024-11-21 14:24 2020-12-12 Show GitHub Exploit DB Packet Storm
198954 9.8 CRITICAL
Network 		westerndigital my_cloud_os_5 An issue was discovered on Western Digital My Cloud OS 5 devices before 5.07.118. A NAS Admin authentication bypass vulnerability could allow an unauthenticated user to gain access to the device. CWE-287
Improper Authentication 		CVE-2020-29563 2024-11-21 14:24 2020-12-12 Show GitHub Exploit DB Packet Storm
198955 6.1 MEDIUM
Network 		smartystreets liveaddressplugin.js A cross-Site Scripting (XSS) vulnerability in this.showInvalid and this.showInvalidCountry in SmartyStreets liveAddressPlugin.js 3.2 allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2020-29455 2024-11-21 14:24 2020-12-12 Show GitHub Exploit DB Packet Storm
198956 9.8 CRITICAL
Network 		sophos cyberoamos An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows unauthenticated attackers to execute arbitrary SQL statements remotely. CWE-89
SQL Injection 		CVE-2020-29574 2024-11-21 14:24 2020-12-12 Show GitHub Exploit DB Packet Storm
198957 9.8 CRITICAL
Network 		docker registry Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacke… CWE-521
Weak Password Requirements  		CVE-2020-29591 2024-11-21 14:24 2020-12-12 Show GitHub Exploit DB Packet Storm
198958 9.8 CRITICAL
Network 		lanatmservice m3_atm_monitoring_system In Lan ATMService M3 ATM Monitoring System 6.1.0, a remote attacker able to use a default cookie value, such as PHPSESSID=LANIT-IMANAGER, can achieve control over the system because of Insufficient S… CWE-613
 Insufficient Session Expiration 		CVE-2020-29667 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
198959 5.3 MEDIUM
Network 		lanatmservice m3_atm_monitoring_system In Lan ATMService M3 ATM Monitoring System 6.1.0, due to a directory-listing vulnerability, a remote attacker can view log files, located in /websocket/logs/, that contain a user's cookie values and … NVD-CWE-Other
CVE-2020-29666 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm
198960 3.7 LOW
Network 		sympa
fedoraproject
debian 		sympa
fedora
debian_linux 		Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP API access by sending any arbitrary string (except one from an expired cookie) as the cookie value to authenticateAndRun. CWE-287
CWE-565
Improper Authentication
 Reliance on Cookies without Validation and Integrity Checking 		CVE-2020-29668 2024-11-21 14:24 2020-12-10 Show GitHub Exploit DB Packet Storm