Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254251 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
254252 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
254253 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
254254 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
254255 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足
CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
254256 9.3 危険 マイクロソフト - Microsoft Internet Explorer において任意のコードが実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0249 2010-02-19 14:21 2010-01-15 Show GitHub Exploit DB Packet Storm
254257 7.5 危険 アップル
MySQL AB
- MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2008-0227 2010-02-19 11:37 2008-01-10 Show GitHub Exploit DB Packet Storm
254258 7.5 危険 アップル
MySQL AB
- MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2008-0226 2010-02-19 11:32 2008-01-10 Show GitHub Exploit DB Packet Storm
254259 7.5 危険 Linux
レッドハット
- Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性 - CVE-2006-6304 2010-02-18 14:28 2006-12-14 Show GitHub Exploit DB Packet Storm
254260 7.8 危険 Linux
レッドハット
- Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-4272 2010-02-18 14:28 2010-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 7, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199831 9.8 CRITICAL
Network
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB w… CWE-294
Authentication Bypass by Capture-replay 
CVE-2020-35551 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199832 9.8 CRITICAL
Network
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via StatusBar. The Samsung ID is SVE-2020-178… NVD-CWE-noinfo
CVE-2020-35550 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199833 5.5 MEDIUM
Local
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SV… NVD-CWE-noinfo
CVE-2020-35549 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199834 5.5 MEDIUM
Local
google android An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (D… NVD-CWE-noinfo
CVE-2020-35548 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199835 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the vi… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-35480 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199836 6.1 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is alway… CWE-79
Cross-site Scripting
CVE-2020-35479 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199837 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki … CWE-79
Cross-site Scripting
CVE-2020-35478 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199838 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggl… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2020-35477 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199839 7.5 HIGH
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to ch… CWE-79
Cross-site Scripting
CVE-2020-35475 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
199840 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that t… CWE-79
Cross-site Scripting
CVE-2020-35474 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm