Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255001	4.3	警告	シスコシステムズ	-	Cisco Secure Desktop の +CSCOT+/translation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0440	2010-02-24 12:27	2010-02-1	Show	GitHub Exploit DB Packet Storm

255002	6.2	警告	ヒューレット・パッカード	-	HP ECMT におけるデータベースにアクセスされる脆弱性	CWE-noinfo 情報不足	CVE-2009-4184	2010-02-24 12:27	2009-10-5	Show	GitHub Exploit DB Packet Storm

255003	4.6	警告	アップル	-	Apple iPhone OS のリカバリモードにおける任意のデータを読まれる脆弱性	CWE-399 リソース管理の問題	CVE-2010-0038	2010-02-24 12:26	2010-02-2	Show	GitHub Exploit DB Packet Storm

255004	5	警告	サン・マイクロシステムズ VMware	-	Sun Java SE におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3885	2010-02-24 12:26	2009-11-9	Show	GitHub Exploit DB Packet Storm

255005	7.5	危険	サン・マイクロシステムズ VMware	-	JDK および JRE の Java Update 機能における古いバージョンの脆弱性を利用される脆弱性	CWE-Other その他	CVE-2009-3864	2010-02-24 12:26	2009-11-3	Show	GitHub Exploit DB Packet Storm

255006	5	警告	アドビシステムズ	-	Adobe ColdFusion のデフォルト設定におけるコレクションのメタデータを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0185	2010-02-24 12:25	2010-01-29	Show	GitHub Exploit DB Packet Storm

255007	6.8	警告	Apache Software Foundation	-	Apache HTTP Server の ap_proxy_send_fb 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0010	2010-02-24 12:25	2010-02-2	Show	GitHub Exploit DB Packet Storm

255008	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3877	2010-02-24 12:25	2009-11-5	Show	GitHub Exploit DB Packet Storm

255009	5	警告	サン・マイクロシステムズサイバートラスト株式会社 VMware ヒューレット・パッカードレッドハット	-	JDK、JRE および SDK におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3876	2010-02-24 12:24	2009-11-5	Show	GitHub Exploit DB Packet Storm

255010	5	警告	アップルサイバートラスト株式会社サン・マイクロシステムズヒューレット・パッカード VMware レッドハット	-	JDK、JRE および SDK の MessageDigest.isEqual 関数における HMAC ベースのデジタル署名の偽装および認証回避の脆弱性	CWE-310 暗号の問題	CVE-2009-3875	2010-02-24 12:24	2009-11-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212231	8.0	HIGH Adjacent	tp-link	tl-wa855re_firmware	This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of TP-Link TL-WA855RE Firmware Ver: 855rev4-up-ver1-0-1-P1[20191213-rel60361] Wi-Fi extenders. Al…	CWE-287 Improper Authentication	CVE-2020-10916	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212232	6.3	MEDIUM Network	barrelstrengthdesign	sprout_forms	In Sprout Forms before 3.9.0, there is a potential Server-Side Template Injection vulnerability when using custom fields in Notification Emails which could lead to the execution of Twig code. This ha…	CWE-74 Injection	CVE-2020-11056	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212233	8.1	HIGH Network	java-websocket_project	java-websocket	In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched …	CWE-295 Improper Certificate Validation	CVE-2020-11050	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212234	7.2	HIGH Network	gira	tks-ip-gateway_firmware	Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access.	CWE-78 OS Command	CVE-2020-10795	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212235	9.8	CRITICAL Network	gira	tks-ip-gateway_firmware	Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root acce…	CWE-22 Path Traversal	CVE-2020-10794	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212236	5.4	MEDIUM Network	bookstackapp	bookstack	In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user with permission to create comments could POST HTML directly to the system …	CWE-79 Cross-site Scripting	CVE-2020-11055	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212237	3.5	LOW Network	qutebrowser fedoraproject	qutebrowser fedora	In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (col…	-	CVE-2020-11054	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212238	6.1	MEDIUM Network	oauth2_proxy_project	oauth2_proxy	In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This…	CWE-601 Open Redirect	CVE-2020-11053	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212239	9.8	CRITICAL Network	sorcery_project	sorcery	In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined l…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-11052	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

212240	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0.	-	CVE-2020-11049	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed