Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254851 5 警告 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品の CSSLoaderImpl::DoSheetComplete 関数におけるウェブページのレンダリングを中断される脆弱性 CWE-Other
その他
CVE-2010-0169 2010-04-6 16:50 2010-03-23 Show GitHub Exploit DB Packet Storm
254852 7.6 危険 Mozilla Foundation - Mozilla Firefox の nsDocument::MaybePreLoadImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0168 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
254853 9.3 危険 Mozilla Foundation - Mozilla Firefox の imgContainer::InternalAddFrameHelper 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0164 2010-04-6 16:49 2010-03-23 Show GitHub Exploit DB Packet Storm
254854 4.3 警告 Mozilla Foundation
レッドハット
- 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0171 2010-04-5 14:54 2010-03-23 Show GitHub Exploit DB Packet Storm
254855 4.3 警告 Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0170 2010-04-5 14:53 2010-03-23 Show GitHub Exploit DB Packet Storm
254856 7.5 危険 Heartlogic - HL-SiteManager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1331 2010-04-2 15:02 2010-04-2 Show GitHub Exploit DB Packet Storm
254857 9.3 危険 Mozilla Foundation - Mozilla Firefox の Web Open Fonts Format デコーダ における整数オーバーフローの脆弱性 CWE-noinfo
情報不足
CVE-2010-1028 2010-04-2 14:05 2010-03-19 Show GitHub Exploit DB Packet Storm
254858 5 警告 富士通
アクセラテクノロジ
- Accela BizSearch のローカル収集におけるアクセス権限に関する脆弱性 CWE-200
情報漏えい
- 2010-04-2 14:05 2010-03-10 Show GitHub Exploit DB Packet Storm
254859 1.9 注意 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel における SCSI ホストの属性に任意の変更を加えられる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-3556 2010-04-2 14:02 2010-01-19 Show GitHub Exploit DB Packet Storm
254860 10 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の e1000e ドライバにおけるイーサネットフレームの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2009-4538 2010-04-2 14:02 2010-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212201 6.1 MEDIUM
Network
kaminari_project
debian
kaminari
debian_linux
In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. - CVE-2020-11082 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm
212202 9.8 CRITICAL
Network
node-dns-sync_project node-dns-sync node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt… CWE-77
Command Injection
CVE-2020-11079 2024-11-21 13:56 2020-05-29 Show GitHub Exploit DB Packet Storm
212203 9.9 CRITICAL
Network
anchore engine In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima… NVD-CWE-Other
CVE-2020-11075 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212204 7.5 HIGH
Network
aegir_project aegir In AEgir greater than or equal to 21.7.0 and less than 21.10.1, aegir publish and aegir build may leak secrets from environment variables in the browser bundle published to npm. This has been fixed i… CWE-200
Information Exposure
CVE-2020-11059 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212205 7.8 HIGH
Local
sympa
fedoraproject
debian
canonical
sympa
fedora
debian_linux
ubuntu_linux
Sympa before 6.2.56 allows privilege escalation. CWE-269
 Improper Privilege Management
CVE-2020-10936 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212206 6.1 MEDIUM
Network
centreon centreon_host-monitoring_widget
centreon_tactical-overview_widget
centreon_service-monitoring_widget
Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in vers… CWE-79
Cross-site Scripting
CVE-2020-10946 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212207 4.3 MEDIUM
Adjacent
centreon widget-host-monitoring
centreon
Centreon before 19.10.7 exposes Session IDs in server responses. CWE-200
Information Exposure
CVE-2020-10945 2024-11-21 13:56 2020-05-28 Show GitHub Exploit DB Packet Storm
212208 7.5 HIGH
Network
puma
fedoraproject
debian
puma
fedora
debian_linux
In Puma (RubyGem) before 4.3.4 and 3.12.5, an attacker could smuggle an HTTP response, by using an invalid transfer-encoding header. The problem has been fixed in Puma 3.12.5 and Puma 4.3.4. - CVE-2020-11076 2024-11-21 13:56 2020-05-23 Show GitHub Exploit DB Packet Storm
212209 7.5 HIGH
Network
puma
fedoraproject
debian
opensuse
puma
fedora
debian_linux
leap
In Puma (RubyGem) before 4.3.5 and 3.12.6, a client could smuggle a request through a proxy, causing the proxy to send a response back to another unknown client. If the proxy uses persistent connecti… - CVE-2020-11077 2024-11-21 13:56 2020-05-23 Show GitHub Exploit DB Packet Storm
212210 6.8 MEDIUM
Network
httplib2_project
fedoraproject
debian
httplib2
fedora
debian_linux
In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server. T… - CVE-2020-11078 2024-11-21 13:56 2020-05-21 Show GitHub Exploit DB Packet Storm