Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253221 9.3 危険 Google - Windows 上で稼働する Google Chrome における重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2010-0657 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
253222 9.3 危険 Google - Google Chrome における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0655 2010-11-24 15:00 2010-01-25 Show GitHub Exploit DB Packet Storm
253223 9.3 危険 Google - Google Chrome の sandbox/src/crosscall_server.cc における整数オーバーフロー脆弱性 CWE-189
数値処理の問題 		CVE-2010-0649 2010-11-24 15:00 2010-02-10 Show GitHub Exploit DB Packet Storm
253224 10 危険 Google - Google Chrome にて使用される Google V8 内の factory.cc における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0646 2010-11-24 14:59 2010-02-10 Show GitHub Exploit DB Packet Storm
253225 9.3 危険 Google - Google Chrome にて使用される Google V8 内の factory.cc における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0645 2010-11-24 14:59 2010-02-10 Show GitHub Exploit DB Packet Storm
253226 4.3 警告 Google - Google Chrome におけるクライアントユーザに関する重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0643 2010-11-24 14:59 2010-02-10 Show GitHub Exploit DB Packet Storm
253227 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1665 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
253228 5 警告 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1664 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
253229 10 危険 Google - Google Chrome の Google URL Parsing Library における同一生成元ポリシーを回避される脆弱性 CWE-264
CWE-noinfo
CVE-2010-1663 2010-11-24 14:58 2010-04-27 Show GitHub Exploit DB Packet Storm
253230 7.8 危険 Google - Google Chrome の Google V8 bindings におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-1506 2010-11-24 14:58 2010-04-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209421 6.1 MEDIUM
Network 		ibi webfocus_business_intelligence WebFOCUS Business Intelligence 8.0 (SP6) was prone to XSS via arbitrary URL parameters. CWE-79
Cross-site Scripting 		CVE-2020-14202 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm
209422 6.5 MEDIUM
Network 		strapi strapi Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafte… CWE-20
 Improper Input Validation  		CVE-2020-13961 2024-11-21 14:02 2020-06-20 Show GitHub Exploit DB Packet Storm
209423 7.8 HIGH
Local 		rtslib-fb_project rtslib-fb Open-iSCSI rtslib-fb through 2.1.72 has weak permissions for /etc/target/saveconfig.json because shutil.copyfile (instead of shutil.copy) is used, and thus permissions are not preserved. CWE-276
Incorrect Default Permissions  		CVE-2020-14019 2024-11-21 14:02 2020-06-19 Show GitHub Exploit DB Packet Storm
209424 4.2 MEDIUM
Local 		cisofy
fedoraproject 		lynis
fedora 		CISOfy Lynis before 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed l… CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-13882 2024-11-21 14:02 2020-06-19 Show GitHub Exploit DB Packet Storm
209425 8.1 HIGH
Adjacent 		abus secvest_wireless_control_fube50001_firmware The wireless-communication feature of the ABUS Secvest FUBE50001 device does not encrypt sensitive data such as PIN codes or IDs of used proximity chip keys (RFID tokens). This makes it easier for an… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-14157 2024-11-21 14:02 2020-06-18 Show GitHub Exploit DB Packet Storm
209426 7.5 HIGH
Network 		golang
fedoraproject 		text
fedora 		The x/text package before 0.3.3 for Go has a vulnerability in encoding/unicode that could lead to the UTF-16 decoder entering an infinite loop, causing the program to crash or run out of memory. An a… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-14040 2024-11-21 14:02 2020-06-18 Show GitHub Exploit DB Packet Storm
209427 7.2 HIGH
Network 		cacti
fedoraproject 		cacti
fedora 		A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries. CWE-89
SQL Injection 		CVE-2020-14295 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
209428 6.5 MEDIUM
Network 		zammad zammad Zammad before 3.3.1, when Domain Based Assignment is enabled, relies on a claimed e-mail address for authorization decisions. An attacker can register a new account that will have access to all ticke… CWE-863
 Incorrect Authorization 		CVE-2020-14214 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
209429 5.4 MEDIUM
Network 		zammad zammad In Zammad before 3.3.1, a Customer has ticket access that should only be available to an Agent (e.g., read internal data, split, or merge). CWE-862
 Missing Authorization 		CVE-2020-14213 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
209430 8.8 HIGH
Network 		ffmpeg ffmpeg FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted. CWE-787
 Out-of-bounds Write 		CVE-2020-14212 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm