Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254361 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 CWE-Other
その他 		CVE-2009-3983 2010-01-29 09:53 2009-12-15 Show GitHub Exploit DB Packet Storm
254362 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の libtheora における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-3389 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
254363 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の liboggplay における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3388 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
254364 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3982 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
254365 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3981 2010-01-28 12:16 2009-12-15 Show GitHub Exploit DB Packet Storm
254366 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3980 2010-01-28 12:15 2009-12-15 Show GitHub Exploit DB Packet Storm
254367 10 危険 アドビシステムズ - Adobe Flash Media Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3792 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
254368 5 警告 アドビシステムズ - Adobe Flash Media Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3791 2010-01-27 10:02 2009-12-18 Show GitHub Exploit DB Packet Storm
254369 5.8 警告 PostgreSQL.org
ターボリナックス
サン・マイクロシステムズ		 - PostgreSQL における X.509 証明書の処理に関する任意の SSL-based PostgreSQL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-4034 2010-01-26 11:48 2009-12-15 Show GitHub Exploit DB Packet Storm
254370 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の do_insn_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4031 2010-01-26 11:47 2009-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 8, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197421 5.9 MEDIUM
Network 		fujixerox apeosware_management_suite The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensiti… CWE-295
Improper Certificate Validation  		CVE-2020-5526 2024-11-21 14:34 2020-01-31 Show GitHub Exploit DB Packet Storm
197422 7.4 HIGH
Network 		nttdata
ashikagabank
sihd-bk
shikokubank
tohoku-bank
naganobank
77bank
hokkaidobank
hokugin 		mypallete
ashigin
ikeda_senshu_bank
shikoku_bank
tougin
nagagin
77_bank
dogin
hokuriku_bank_portal 		Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-misma… CWE-295
Improper Certificate Validation  		CVE-2020-5523 2024-11-21 14:34 2020-01-28 Show GitHub Exploit DB Packet Storm
197423 7.4 HIGH
Network 		fujixerox easy_netprint The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a… CWE-295
Improper Certificate Validation  		CVE-2020-5522 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
197424 7.4 HIGH
Network 		fujixerox easy_netprint The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a cra… CWE-295
Improper Certificate Validation  		CVE-2020-5521 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
197425 7.4 HIGH
Network 		fujixerox netprint The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted ce… CWE-295
Improper Certificate Validation  		CVE-2020-5520 2024-11-21 14:34 2020-01-27 Show GitHub Exploit DB Packet Storm
197426 7.9 HIGH
Adjacent 		philips hue_bridge_v2_firmware Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code… CWE-787
 Out-of-bounds Write 		CVE-2020-6007 2024-11-21 14:34 2020-01-24 Show GitHub Exploit DB Packet Storm
197427 5.3 MEDIUM
Network 		vmware
oracle 		spring_framework
flexcube_private_banking
insurance_policy_administration_j2ee
insurance_rules_palette
retail_service_backbone
retail_back_office
weblogic_server
application_test… 		Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) … CWE-352
 Origin Validation Error 		CVE-2020-5397 2024-11-21 14:34 2020-01-18 Show GitHub Exploit DB Packet Storm
197428 7.5 HIGH
Network 		vmware
oracle
netapp 		spring_framework
flexcube_private_banking
insurance_policy_administration_j2ee
insurance_rules_palette
retail_service_backbone
retail_back_office
weblogic_server
application_test… 		In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it … CWE-494
 Download of Code Without Integrity Check 		CVE-2020-5398 2024-11-21 14:34 2020-01-17 Show GitHub Exploit DB Packet Storm
197429 6.5 MEDIUM
Network 		phpbb phpbb phpBB 3.2.8 allows a CSRF attack that can approve pending group memberships. CWE-352
 Origin Validation Error 		CVE-2020-5502 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm
197430 4.3 MEDIUM
Network 		phpbb phpbb phpBB 3.2.8 allows a CSRF attack that can modify a group avatar. CWE-352
 Origin Validation Error 		CVE-2020-5501 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm