Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254251	5	警告	アップル VMware OpenSSL Project IBM ヒューレット・パッカード	-	OpenSSL の ssl3_get_record 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0740	2011-06-29 10:08	2010-03-24	Show	GitHub Exploit DB Packet Storm

254252	9.3	危険	アドビシステムズターボリナックス	-	Adobe Reader および Acrobat におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-2094	2011-06-28 12:25	2011-06-14	Show	GitHub Exploit DB Packet Storm

254253	5	警告	アドビシステムズ	-	Adobe ColdFusion におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-2091	2011-06-28 12:23	2011-06-14	Show	GitHub Exploit DB Packet Storm

254254	6.8	警告	アドビシステムズ	-	Adobe ColdFusion におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-0629	2011-06-28 12:22	2011-06-14	Show	GitHub Exploit DB Packet Storm

254255	10	危険	アドビシステムズターボリナックス	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-2110	2011-06-28 12:21	2011-06-14	Show	GitHub Exploit DB Packet Storm

254256	5	警告	ISC, Inc. ターボリナックス	-	ISC DHCP の dhcpd におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-16 環境設定	CVE-2009-1892	2011-06-28 12:19	2009-10-7	Show	GitHub Exploit DB Packet Storm

254257	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1266	2011-06-28 12:18	2011-06-14	Show	GitHub Exploit DB Packet Storm

254258	4.3	警告	マイクロソフト	-	Windows Server 2003 および 2008 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1264	2011-06-28 12:17	2011-06-14	Show	GitHub Exploit DB Packet Storm

254259	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2011-1261	2011-06-28 12:16	2011-06-14	Show	GitHub Exploit DB Packet Storm

254260	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer 6 から 8 における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2011-1258	2011-06-28 12:16	2011-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208381	7.5	HIGH Network	squid-cache canonical debian fedoraproject opensuse	squid ubuntu_linux debian_linux fedora leap	Squid before 4.13 and 5.x before 5.0.4 allows a trusted peer to perform Denial of Service by consuming all available CPU cycles during handling of a crafted Cache Digest response message. This only o…	CWE-667 Improper Locking	CVE-2020-24606	2024-11-21 14:15	2020-08-25	Show	GitHub Exploit DB Packet Storm

208382	6.5	MEDIUM Network	wso2	identity_server_analytics api_microgateway api_manager enterprise_integrator api_manager_analytics	The Management Console in certain WSO2 products allows XXE attacks during EventReceiver updates. This affects API Manager through 3.0.0, API Manager Analytics 2.2.0 and 2.5.0, API Microgateway 2.2.0,…	CWE-611 XXE	CVE-2020-24591	2024-11-21 14:15	2020-08-22	Show	GitHub Exploit DB Packet Storm

208383	9.1	CRITICAL Network	wso2	api_microgateway api_manager	The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML Entity Expansion attacks.	CWE-776 XML Entity Expansion	CVE-2020-24590	2024-11-21 14:15	2020-08-22	Show	GitHub Exploit DB Packet Storm

208384	9.1	CRITICAL Network	wso2	api_microgateway api_manager	The Management Console in WSO2 API Manager through 3.1.0 and API Microgateway 2.2.0 allows XML External Entity injection (XXE) attacks.	CWE-611 XXE	CVE-2020-24589	2024-11-21 14:15	2020-08-22	Show	GitHub Exploit DB Packet Storm

208385	5.3	MEDIUM Network	wolfssl	wolfssl	An issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS application_data messages in epoch 0 do not produce an out-of-order error. Instead, these messages are…	NVD-CWE-noinfo	CVE-2020-24585	2024-11-21 14:15	2020-08-21	Show	GitHub Exploit DB Packet Storm

208386	7.8	HIGH Local	gog	galaxy	The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Wind…	CWE-798 Use of Hard-coded Credentials	CVE-2020-24574	2024-11-21 14:15	2020-08-21	Show	GitHub Exploit DB Packet Storm

208387	7.5	HIGH Network	nexusdb	nexusdb	NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal.	CWE-22 Path Traversal	CVE-2020-24571	2024-11-21 14:15	2020-08-21	Show	GitHub Exploit DB Packet Storm

208388	7.8	HIGH Local	voidtools	everything	voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged u…	NVD-CWE-noinfo	CVE-2020-24567	2024-11-21 14:15	2020-08-21	Show	GitHub Exploit DB Packet Storm

208389	8.8	HIGH Local	qemu debian	qemu debian_linux	An issue was discovered in TCG Accelerator in QEMU 4.2.0, allows local attackers to execute arbitrary code, escalate privileges, and cause a denial of service (DoS). Note: This is disputed as a bug a…	NVD-CWE-noinfo	CVE-2020-24165	2024-11-21 14:14	2023-08-29	Show	GitHub Exploit DB Packet Storm

208390	5.5	MEDIUM Local	miniupnp_project	ngiflib	An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via crafted .gif file (infinite loop).	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-24221	2024-11-21 14:14	2023-08-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed