Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
254481 9.3 危険 Panda Security - Panda Security ActiveScan におけるコンポーネントのデジタル署名を検証しない問題 CWE-94
コード・インジェクション 		CVE-2009-3735 2010-03-12 15:12 2010-02-12 Show GitHub Exploit DB Packet Storm
254482 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット		 - OpenSSL の dtls1_retrieve_buffered_fragment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1379 2010-03-12 14:44 2009-05-19 Show GitHub Exploit DB Packet Storm
254483 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット		 - OpenSSL の dtls1_process_out_of_seq_message 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-1378 2010-03-12 14:44 2009-05-19 Show GitHub Exploit DB Packet Storm
254484 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット		 - OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2009-1377 2010-03-12 14:43 2009-05-19 Show GitHub Exploit DB Packet Storm
254485 5 警告 アップル
サイバートラスト株式会社
OpenSSL Project
Apache Software Foundation
レッドハット		 - OpenSSL の zlib_stateful_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1678 2010-03-12 14:43 2008-07-10 Show GitHub Exploit DB Packet Storm
254486 5.8 警告 OpenPNEプロジェクト - OpenPNE におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1040 2010-03-11 12:39 2010-03-5 Show GitHub Exploit DB Packet Storm
254487 10 危険 アドビシステムズ - Adobe Download Manager における任意のプログラムをダウンロードおよびインストールされる脆弱性 CWE-noinfo
情報不足 		CVE-2010-0189 2010-03-11 12:07 2010-02-23 Show GitHub Exploit DB Packet Storm
254488 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の collect_rx_frame 関数における脆弱性 CWE-119
バッファエラー 		CVE-2009-4005 2010-03-11 12:05 2009-11-20 Show GitHub Exploit DB Packet Storm
254489 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の RTL8169 NIC ドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1389 2010-03-11 12:04 2009-06-16 Show GitHub Exploit DB Packet Storm
254490 5 警告 サン・マイクロシステムズ
サイバートラスト株式会社
VMware
Net-SNMP
レッドハット		 - net-snmp の snmpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-1887 2010-03-11 12:03 2009-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210021 5.9 MEDIUM
Network 		djangoproject
canonical
fedoraproject
netapp
debian
oracle 		django
ubuntu_linux
fedora
steelstore_cloud_integrated_storage
sra_plugin
debian_linux
zfs_storage_appliance_kit 		An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collis… CWE-295
Improper Certificate Validation  		CVE-2020-13254 2024-11-21 14:00 2020-06-3 Show GitHub Exploit DB Packet Storm
210022 8.0 HIGH
Network 		synacor zimbra_collaboration_suite Zimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an avatar file. There is potential abuse of /service/upload servlet in the webmail subsystem. A user can up… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-12846 2024-11-21 14:00 2020-06-4 Show GitHub Exploit DB Packet Storm
210023 8.8 HIGH
Network 		sysax multi_server An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authentication token. CWE-384
 Session Fixation 		CVE-2020-13229 2024-11-21 14:00 2020-06-2 Show GitHub Exploit DB Packet Storm
210024 6.1 MEDIUM
Network 		sysax multi_server An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter. CWE-79
Cross-site Scripting 		CVE-2020-13228 2024-11-21 14:00 2020-06-2 Show GitHub Exploit DB Packet Storm
210025 5.3 MEDIUM
Network 		sysax multi_server An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid path permission error. This bypasses the fa… CWE-22
Path Traversal 		CVE-2020-13227 2024-11-21 14:00 2020-06-2 Show GitHub Exploit DB Packet Storm
210026 5.5 MEDIUM
Local 		sane-project
fedoraproject
debian
opensuse
canonical 		sane_backends
fedora
debian_linux
leap
ubuntu_linux 		A NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, aka GHSL-20… CWE-476
 NULL Pointer Dereference 		CVE-2020-12867 2024-11-21 14:00 2020-06-1 Show GitHub Exploit DB Packet Storm
210027 8.8 HIGH
Network 		mappresspro mappress The mappress-google-maps-for-wordpress plugin before 2.54.6 for WordPress does not correctly implement capability checks for AJAX functions related to creation/retrieval/deletion of PHP template file… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-12675 2024-11-21 14:00 2020-05-30 Show GitHub Exploit DB Packet Storm
210028 7.8 HIGH
Local 		teradici pcoip_graphics_agent
pcoip_standard_agent 		Initialization of the pcoip_credential_provider in Teradici PCoIP Standard Agent for Windows and PCoIP Graphics Agent for Windows versions 19.11.1 and earlier creates an insecure named pipe, which al… CWE-362
Race Condition 		CVE-2020-13173 2024-11-21 14:00 2020-05-29 Show GitHub Exploit DB Packet Storm
210029 5.9 MEDIUM
Network 		netgear r6120_firmware
r6220_firmware
r6350_firmware
r6400_firmware
r6800_firmware
r6850_firmware
r7000p_firmware
r7800_firmware
r8000_firmware
r9000_firmware
rax120_firmware 		Certain NETGEAR devices are affected by Missing SSL Certificate Validation. This affects R7000 1.0.9.6_1.2.19 through 1.0.11.100_10.2.10, and possibly R6120, R7800, R6220, R8000, R6350, R9000, R6400,… CWE-295
Improper Certificate Validation  		CVE-2020-13245 2024-11-21 14:00 2020-05-29 Show GitHub Exploit DB Packet Storm
210030 5.5 MEDIUM
Local 		qemu
canonical
debian 		qemu
ubuntu_linux
debian_linux 		sd_wp_addr in hw/sd/sd.c in QEMU 4.2.0 uses an unvalidated address, which leads to an out-of-bounds read during sdhci_write() operations. A guest OS user can crash the QEMU process. CWE-125
Out-of-bounds Read 		CVE-2020-13253 2024-11-21 14:00 2020-05-28 Show GitHub Exploit DB Packet Storm