Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254711	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4312	2010-01-25 11:52	2009-12-8	Show	GitHub Exploit DB Packet Storm

254712	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4311	2010-01-25 11:52	2009-12-8	Show	GitHub Exploit DB Packet Storm

254713	9.3	危険	マイクロソフト	-	Indeo コーデックに複数の脆弱性	CWE-119 バッファエラー	CVE-2009-4310	2010-01-25 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

254714	9.3	危険	マイクロソフト	-	Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4309	2010-01-25 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

254715	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2009-4210	2010-01-25 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

254716	5	警告	アップルサイバートラスト株式会社 IPsec-Tools レッドハット	-	Ipsec-tools の証明書検証および NAT-Traversal におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1632	2010-01-25 11:48	2009-05-14	Show	GitHub Exploit DB Packet Storm

254717	4	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	PostgreSQL のエラーメッセージの変換処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-0922	2010-01-25 11:48	2009-03-17	Show	GitHub Exploit DB Packet Storm

254718	5.7	警告	日本電気インターネットイニシアティブヤマハ古河電気工業	-	IPv6 を実装した複数の製品にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-01-25 11:47	2009-10-26	Show	GitHub Exploit DB Packet Storm

254719	9.3	危険	マイクロソフト	-	複数の Microsoft 製品のテキストコンバーターにおける整数オーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2506	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

254720	9	危険	マイクロソフト	-	Microsoft Windows の Active Directory フェデレーションサービスにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2509	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209941	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 allows users with the 'Setup documents directories' permission to rename uploaded files to have insecure file extensions. This bypasses the .noexe protection mec…	CWE-668 CWE-276 Exposure of Resource to Wrong Sphere Incorrect Default Permissions	CVE-2020-13240	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

209942	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.	CWE-79 Cross-site Scripting	CVE-2020-13239	2024-11-21 14:00	2020-05-21	Show	GitHub Exploit DB Packet Storm

209943	6.5	MEDIUM Network	cacti fedoraproject	cacti fedora	In Cacti before 1.2.11, auth_profile.php?action=edit allows CSRF for an admin email change.	CWE-352 Origin Validation Error	CVE-2020-13231	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209944	4.3	MEDIUM Network	cacti debian fedoraproject	cacti debian_linux fedora	In Cacti before 1.2.11, disabling a user account does not immediately invalidate any permissions granted to that account (e.g., permission to view logs).	CWE-281 Improper Preservation of Permissions	CVE-2020-13230	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209945	5.5	MEDIUM Local	kde	amarok	A remote user can create a specially crafted M3U file, media playlist file that when loaded by the target user, will trigger a memory leak, whereby Amarok 2.8.0 continue to waste resources over time,…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-13152	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209946	9.8	CRITICAL Network	smartbear	readyapi	An issue was discovered in SmartBear ReadyAPI SoapUI Pro 3.2.5. Due to unsafe use of an Java RMI based protocol in an unsafe configuration, an attacker can inject malicious serialized objects into th…	CWE-502 Deserialization of Untrusted Data	CVE-2020-12835	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209947	9.8	CRITICAL Network	wso2	api_manager	WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-13226	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209948	4.8	MEDIUM Network	phpipam	phpipam	phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget.	CWE-79 Cross-site Scripting	CVE-2020-13225	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209949	7.5	HIGH Network	wireshark debian opensuse fedoraproject	wireshark debian_linux leap fedora	In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a c…	CWE-674 Uncontrolled Recursion	CVE-2020-13164	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm

209950	7.4	HIGH Network	em-imap_project	em-imap	em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is no…	CWE-295 Improper Certificate Validation	CVE-2020-13163	2024-11-21 14:00	2020-05-20	Show	GitHub Exploit DB Packet Storm