Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254901	6.4	警告	VMware	-	VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性	CWE-noinfo 情報不足	CVE-2009-0908	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

254902	2.1	注意	VMware	-	複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2009-0518	2010-03-23 14:10	2010-04-3	Show	GitHub Exploit DB Packet Storm

254903	4.4	警告	KVM レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0419	2010-03-23 14:09	2010-03-1	Show	GitHub Exploit DB Packet Storm

254904	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0263	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254905	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0262	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254906	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0261	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254907	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるヒープベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-0260	2010-03-19 10:28	2010-03-9	Show	GitHub Exploit DB Packet Storm

254908	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0258	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254909	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0264	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

254910	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0257	2010-03-19 10:27	2010-03-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209531	7.5	HIGH Network	apache debian	shiro debian_linux	Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass.	NVD-CWE-noinfo	CVE-2020-13933	2024-11-21 14:02	2020-08-18	Show	GitHub Exploit DB Packet Storm

209532	8.8	HIGH Network	apache	solr	Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-co…	CWE-20 Improper Input Validation	CVE-2020-13941	2024-11-21 14:02	2020-08-17	Show	GitHub Exploit DB Packet Storm

209533	4.3	MEDIUM Network	redhat	quay	An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot…	NVD-CWE-noinfo	CVE-2020-14313	2024-11-21 14:02	2020-08-11	Show	GitHub Exploit DB Packet Storm

209534	7.1	HIGH Network	redhat	cloudforms_management_engine	Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan and attack systems from the internal netw…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-14296	2024-11-21 14:02	2020-08-11	Show	GitHub Exploit DB Packet Storm

209535	9.8	CRITICAL Network	apache	skywalking	Resolved Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.	CWE-89 SQL Injection	CVE-2020-13921	2024-11-21 14:02	2020-08-5	Show	GitHub Exploit DB Packet Storm

209536	6.0	MEDIUM Local	gnu redhat opensuse canonical	grub2 enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus leap ubuntu_linux	There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow lead…	-	CVE-2020-14311	2024-11-21 14:02	2020-08-1	Show	GitHub Exploit DB Packet Storm

209537	6.0	MEDIUM Local	gnu redhat opensuse canonical	grub2 enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus leap ubuntu_linux	There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with bu…	CWE-190 Integer Overflow or Wraparound	CVE-2020-14310	2024-11-21 14:02	2020-08-1	Show	GitHub Exploit DB Packet Storm

209538	7.8	HIGH Local	pi-hole	pi-hole	An issue was discovered in Pi-Hole through 5.0. The local www-data user has sudo privileges to execute the pihole core script as root without a password, which could allow an attacker to obtain root …	CWE-78 CWE-269 OS Command Improper Privilege Management	CVE-2020-14162	2024-11-21 14:02	2020-07-30	Show	GitHub Exploit DB Packet Storm

209539	9.1	CRITICAL Network	abus	secvest_hybrid_fumo50110_firmware	The ABUS Secvest FUMO50110 hybrid module does not have any security mechanism that ensures confidentiality or integrity of RF packets that are exchanged with an alarm panel. This makes it easier to c…	CWE-287 Improper Authentication	CVE-2020-14158	2024-11-21 14:02	2020-07-30	Show	GitHub Exploit DB Packet Storm

209540	6.7	MEDIUM Local	gnu opensuse	grub2 leap	There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic ov…	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2020-14309	2024-11-21 14:02	2020-07-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed