Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253401 5 警告 The Perl Foundation - Perl における UTF-8 文字列の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-3626 2010-05-19 17:57 2009-10-29 Show GitHub Exploit DB Packet Storm
253402 9.3 危険 サン・マイクロシステムズ - Java NPAPI plugin および Java Deployment Toolkit における任意のコードを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2010-1423 2010-05-19 17:56 2010-04-15 Show GitHub Exploit DB Packet Storm
253403 4.3 警告 ISC, Inc.
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット
- BIND 9 の DNSSEC 検証コードに脆弱性 CWE-Other
その他
CVE-2010-0097 2010-05-19 17:42 2010-01-20 Show GitHub Exploit DB Packet Storm
253404 9.3 危険 サイバートラスト株式会社
Wireshark
レッドハット
- Wireshark の erf ファイル処理に脆弱性 CWE-189
数値処理の問題
CVE-2009-3829 2010-05-19 17:42 2009-10-7 Show GitHub Exploit DB Packet Storm
253405 10 危険 アップル - Apple Mac OS X 上で稼働する Safari における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-1120 2010-05-18 16:39 2010-03-25 Show GitHub Exploit DB Packet Storm
253406 6.9 警告 KDE project
サイバートラスト株式会社
レッドハット
- KDE の KDM における制御ソケットの処理に関する権限昇格の脆弱性 CWE-362
競合状態
CVE-2010-0436 2010-05-18 16:39 2010-04-13 Show GitHub Exploit DB Packet Storm
253407 1.9 注意 レッドハット - Free Software Foundation Berkeley DB の NSS モジュールにおける情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2010-0826 2010-05-18 16:38 2010-04-5 Show GitHub Exploit DB Packet Storm
253408 7.8 危険 日本電気 - CapsSuite Small Edition PatchMeister におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1943 2010-05-17 12:03 2010-05-17 Show GitHub Exploit DB Packet Storm
253409 7.8 危険 日本電気 - WebSAM DeploymentManager におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-1941 2010-05-17 12:02 2010-05-17 Show GitHub Exploit DB Packet Storm
253410 6.4 警告 富士通 - Interstage Application Server におけるリクエスト処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2010-1942 2010-05-17 12:01 2010-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199841 6.5 MEDIUM
Network
secomea gatemanager_8250_firmware
gatemanager_4250_firmware
gatemanager_4260_firmware
gatemanager_9250_firmware
A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in th… CWE-22
Path Traversal
CVE-2020-29026 2024-11-21 14:23 2021-02-16 Show GitHub Exploit DB Packet Storm
199842 6.1 MEDIUM
Network
tipsandtricks-hq wp_security_\&_firewall Cross-site scripting (XSS) vulnerability in admin/wp-security-blacklist-menu.php in the Tips and Tricks HQ All In One WP Security & Firewall (all-in-one-wp-security-and-firewall) plugin before 4.4.6 … CWE-79
Cross-site Scripting
CVE-2020-29171 2024-11-21 14:23 2021-02-11 Show GitHub Exploit DB Packet Storm
199843 9.8 CRITICAL
Network
monitorr monitorr Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-28871 2024-11-21 14:23 2021-02-10 Show GitHub Exploit DB Packet Storm
199844 9.8 CRITICAL
Network
inoideas inoerp In InoERP 0.7.2, an unauthorized attacker can execute arbitrary code on the server side due to lack of validations in /modules/sys/form_personalization/json_fp.php. CWE-94
CWE-20
Code Injection
 Improper Input Validation 
CVE-2020-28870 2024-11-21 14:23 2021-02-10 Show GitHub Exploit DB Packet Storm
199845 9.1 CRITICAL
Network
owncloud owncloud Deleting users with certain names caused system files to be deleted. Risk is higher for systems which allow users to register themselves and have the data directory in the web root. This affects ownC… CWE-20
 Improper Input Validation 
CVE-2020-28645 2024-11-21 14:23 2021-02-10 Show GitHub Exploit DB Packet Storm
199846 4.3 MEDIUM
Network
owncloud owncloud The CSRF (Cross Site Request Forgery) token check was improperly implemented on cookie authenticated requests against some ocs API endpoints. This affects ownCloud/core version < 10.6. CWE-352
 Origin Validation Error
CVE-2020-28644 2024-11-21 14:23 2021-02-10 Show GitHub Exploit DB Packet Storm
199847 4.8 MEDIUM
Network
secomea gatemanager_8250_firmware
gatemanager_4250_firmware
gatemanager_4260_firmware
gatemanager_9250_firmware
A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3. CWE-79
Cross-site Scripting
CVE-2020-29021 2024-11-21 14:23 2021-02-9 Show GitHub Exploit DB Packet Storm
199848 7.3 HIGH
Network
windriver
oracle
vxworks
communications_eagle
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound
CVE-2020-28895 2024-11-21 14:23 2021-02-4 Show GitHub Exploit DB Packet Storm
199849 9.8 CRITICAL
Network
zohocorp manageengine_opmanager Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet. NVD-CWE-noinfo
CVE-2020-28653 2024-11-21 14:23 2021-02-4 Show GitHub Exploit DB Packet Storm
199850 7.5 HIGH
Network
rainbowfishsoftware pacsone_server PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by file read/manipulation, which can result in remote information disclosure. CWE-22
Path Traversal
CVE-2020-29166 2024-11-21 14:23 2021-02-3 Show GitHub Exploit DB Packet Storm