Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253731	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1198	2011-01-5 14:40	2010-06-22	Show	GitHub Exploit DB Packet Storm

253732	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsGenericDOMDataNode::SetTextInternal 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1196	2011-01-5 14:39	2010-06-22	Show	GitHub Exploit DB Packet Storm

253733	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品の nsCycleCollector::MarkRoots 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0183	2011-01-5 14:19	2010-06-22	Show	GitHub Exploit DB Packet Storm

253734	7.5	危険	レッドハット	-	Red Hat Enterprise MRG の Management Console における任意のジョブを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4179	2011-01-4 16:28	2010-11-30	Show	GitHub Exploit DB Packet Storm

253735	7.8	危険	シスコシステムズ	-	複数の CIsco 製品上で稼働する remote-access IPSec VPN の実装における有効なグループ名を列挙される脆弱性	CWE-399 リソース管理の問題	CVE-2010-4354	2011-01-4 16:18	2010-09-22	Show	GitHub Exploit DB Packet Storm

253736	4	警告	Pidgin オラクル	-	Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2528	2011-01-4 16:14	2010-07-30	Show	GitHub Exploit DB Packet Storm

253737	7.2	危険	VMware	-	複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4297	2010-12-27 15:40	2010-12-2	Show	GitHub Exploit DB Packet Storm

253738	7.2	危険	VMware	-	複数の VMware 製品の vmware-mount における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4296	2010-12-27 15:38	2010-12-2	Show	GitHub Exploit DB Packet Storm

253739	6.9	警告	VMware	-	複数の VMware 製品の vmware-mount における権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-4295	2010-12-27 15:36	2010-12-2	Show	GitHub Exploit DB Packet Storm

253740	9.3	危険	VMware	-	複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4294	2010-12-27 15:33	2010-12-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
195871	6.6	MEDIUM Network	siedle	sg_150-0_firmware	The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 has a passwordless ftp ssh user. By using an exploit chain, an attacker with access to the network can get root access on the gateway.	CWE-306 Missing Authentication for Critical Function	CVE-2020-9473	2024-11-21 14:40	2020-04-7	Show	GitHub Exploit DB Packet Storm

195872	7.5	HIGH Network	cacagoo	tv-288zd-2mp_firmware	The CACAGOO Cloud Storage Intelligent Camera TV-288ZD-2MP with firmware 3.4.2.0919 allows access to the RTSP service without a password.	CWE-306 Missing Authentication for Critical Function	CVE-2020-9349	2024-11-21 14:40	2020-04-3	Show	GitHub Exploit DB Packet Storm

195873	4.3	MEDIUM Network	piwigo	piwigo	The Community plugin 2.9.e-beta for Piwigo allows users to set image information on images in albums for which they do not have permission, by manipulating the image_id parameter.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-9468	2024-11-21 14:40	2020-03-27	Show	GitHub Exploit DB Packet Storm

195874	5.4	MEDIUM Network	piwigo	piwigo	Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.	CWE-79 Cross-site Scripting	CVE-2020-9467	2024-11-21 14:40	2020-03-27	Show	GitHub Exploit DB Packet Storm

195875	8.8	HIGH Network	microfocus	service_manager_automation	An SQL injection vulnerability was discovered in Micro Focus Service Manager Automation (SMA), affecting versions 2019.08, 2019.05, 2019.02, 2018.08, 2018.05, 2018.02. The vulnerability could allow f…	CWE-89 SQL Injection	CVE-2020-9521	2024-11-21 14:40	2020-03-27	Show	GitHub Exploit DB Packet Storm

195876	5.4	MEDIUM Network	microfocus	vibe	A stored XSS vulnerability was discovered in Micro Focus Vibe, affecting all Vibe version prior to 4.0.7. The vulnerability could allows a remote attacker to craft and store malicious content into Vi…	CWE-79 Cross-site Scripting	CVE-2020-9520	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

195877	7.8	HIGH Local	adobe	bridge	Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.	CWE-787 Out-of-bounds Write	CVE-2020-9552	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

195878	7.8	HIGH Local	adobe	bridge	Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.	CWE-787 Out-of-bounds Write	CVE-2020-9551	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

195879	7.5	HIGH Network	tp-link	archer_c50	TP-Link Archer C50 V3 devices before Build 200318 Rel. 62209 allows remote attackers to cause a denial of service via a crafted HTTP Header containing an unexpected Referer field.	CWE-772 Missing Release of Resource after Effective Lifetime	CVE-2020-9375	2024-11-21 14:40	2020-03-26	Show	GitHub Exploit DB Packet Storm

195880	5.3	MEDIUM Local	kde debian fedoraproject	okular debian_linux fedora	KDE Okular before 1.10.0 allows code execution via an action link in a PDF document.	NVD-CWE-noinfo	CVE-2020-9359	2024-11-21 14:40	2020-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed