Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253631	7.5	危険	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit における PHP コードを挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3760	2010-09-14 15:54	2009-10-22	Show	GitHub Exploit DB Packet Storm

253632	6	警告	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-3759	2010-09-14 15:54	2009-10-22	Show	GitHub Exploit DB Packet Storm

253633	7.5	危険	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-3758	2010-09-14 15:53	2009-10-22	Show	GitHub Exploit DB Packet Storm

253634	4.3	警告	シトリックス・システムズ	-	Citrix XenCenterWeb の XenServer Resource Kit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3757	2010-09-14 15:53	2009-10-22	Show	GitHub Exploit DB Packet Storm

253635	7.2	危険	シトリックス・システムズ	-	Xen の xend におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2008-5716	2010-09-14 15:53	2008-12-24	Show	GitHub Exploit DB Packet Storm

253636	6	警告	VMware	-	VMware Studio の Virtual Appliance Management Infrastructure における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-2667	2010-09-13 16:05	2010-07-13	Show	GitHub Exploit DB Packet Storm

253637	4.4	警告	VMware	-	VMware Studio における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2427	2010-09-13 16:05	2010-07-13	Show	GitHub Exploit DB Packet Storm

253638	6.8	警告	VMware	-	VMware SpringSource tc Server Runtime における JMX インターフェイスへのアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2010-1454	2010-09-13 16:05	2010-05-13	Show	GitHub Exploit DB Packet Storm

253639	4.3	警告	VMware	-	VMware View におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1143	2010-09-13 16:04	2010-05-5	Show	GitHub Exploit DB Packet Storm

253640	4.9	警告	VMware	-	複数の VMware 製品の hcmon.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2008-3761	2010-09-13 16:04	2008-08-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196401	7.8	HIGH Local	linux	linux_kernel	In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i…	CWE-416 Use After Free	CVE-2020-7053	2024-11-21 14:36	2020-01-15	Show	GitHub Exploit DB Packet Storm

196402	9.1	CRITICAL Network	yet_another_java_service_wrapper_project	yet_another_java_service_wrapper	An XXE vulnerability in JnlpSupport in Yet Another Java Service Wrapper (YAJSW) 12.14, as used in NSA Ghidra and other products, allows attackers to exfiltrate data from remote hosts and potentially …	CWE-611 XXE	CVE-2020-6958	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196403	6.1	MEDIUM Network	cayintech	smp-pro4_firmware	An issue was discovered on Cayin SMP-PRO4 devices. They allow image_preview.html?filename= reflected XSS.	CWE-79 Cross-site Scripting	CVE-2020-6955	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196404	6.5	MEDIUM Network	cayintech	smp-pro4_firmware	An issue was discovered on Cayin SMP-PRO4 devices. A user can discover a saved password by viewing the URL after a Connection String Test. This password is shown in the webpass parameter of a media_f…	CWE-200 Information Exposure	CVE-2020-6954	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196405	5.3	MEDIUM Network	gitlab	gitlab	An issue was discovered in GitLab Enterprise Edition (EE) 8.9.0 through 12.6.1. Using the project import feature, it was possible for someone to obtain issues from private projects.	NVD-CWE-noinfo	CVE-2020-6832	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196406	8.8	HIGH Network	hashbrowncms	hashbrown_cms	A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3. An editor user can change the password hash of an admin user's account, or otherwise reconfigure t…	CWE-269 Improper Privilege Management	CVE-2020-6949	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196407	9.8	CRITICAL Network	hashbrowncms	hashbrown_cms	A remote code execution issue was discovered in HashBrown CMS through 1.3.3. Server/Entity/Deployer/GitDeployer.js has a Service.AppService.exec call that mishandles the URL, repository, username, an…	CWE-78 OS Command	CVE-2020-6948	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196408	5.3	MEDIUM Network	ultimatemember	ultimate_member	Multiple Insecure Direct Object Reference vulnerabilities in includes/core/class-files.php in the Ultimate Member plugin through 2.1.2 for WordPress allow remote attackers to change other users' prof…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-6859	2024-11-21 14:36	2020-01-14	Show	GitHub Exploit DB Packet Storm

196409	8.8	HIGH Network	symonics fedoraproject	libmysofa fedora	libmysofa 0.9.1 has a stack-based buffer overflow in readDataVar in hdf/dataobject.c during the reading of a header message attribute.	CWE-787 Out-of-bounds Write	CVE-2020-6860	2024-11-21 14:36	2020-01-13	Show	GitHub Exploit DB Packet Storm

196410	7.5	HIGH Network	uclouvain fedoraproject debian redhat oracle	openjpeg fedora debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux enterprise_linux_server_aus enterprise_linux_server…	OpenJPEG through 2.3.1 has a heap-based buffer overflow in opj_t1_clbl_decode_processor in openjp2/t1.c because of lack of opj_j2k_update_image_dimensions validation.	CWE-787 Out-of-bounds Write	CVE-2020-6851	2024-11-21 14:36	2020-01-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed