Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255171 5 警告 サン・マイクロシステムズ
VMware
レッドハット
- Sun Java SE の TrueType フォント解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-3729 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
255172 5 警告 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット
- Sun Java SE および OpenJDK の Java Runtime Environment (JRE) における ディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2009-3728 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
255173 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0248 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
255174 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0244 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
255175 9.3 危険 マイクロソフト - Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0027 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
255176 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0247 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
255177 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
255178 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
255179 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
255180 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201571 5.5 MEDIUM
Local
google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Any application may establish itself as the default dialer, without user interaction. The Samsung ID is SV… NVD-CWE-noinfo
CVE-2020-35549 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201572 5.5 MEDIUM
Local
google android An issue was discovered in Finder on Samsung mobile devices with Q(10.0) software. A call to a non-existent provider allows attackers to cause a denial of service. The Samsung ID is SVE-2020-18629 (D… NVD-CWE-noinfo
CVE-2020-35548 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201573 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
An issue was discovered in MediaWiki before 1.35.1. Missing users (accounts that don't exist) and hidden users (accounts that have been explicitly hidden due to being abusive, or similar) that the vi… CWE-203
 Information Exposure Through Discrepancy
CVE-2020-35480 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201574 6.1 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. Language::translateBlockExpiry itself does not escape in all code paths. For example, the return of Language::userTimeAndDate is is alway… CWE-79
Cross-site Scripting
CVE-2020-35479 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201575 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
MediaWiki before 1.35.1 allows XSS via BlockLogFormatter.php. MediaWiki:blanknamespace potentially can be output as raw HTML with SCRIPT tags via LogFormatter::makePageLink(). This affects MediaWiki … CWE-79
Cross-site Scripting
CVE-2020-35478 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201576 5.3 MEDIUM
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
MediaWiki before 1.35.1 blocks legitimate attempts to hide log entries in some situations. If one sets MediaWiki:Mainpage to Special:MyLanguage/Main Page, visits a log entry on Special:Log, and toggl… CWE-670
 Always-Incorrect Control Flow Implementation
CVE-2020-35477 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201577 7.5 HIGH
Network
mediawiki
debian
fedoraproject
mediawiki
debian_linux
fedora
In MediaWiki before 1.35.1, the messages userrights-expiry-current and userrights-expiry-none can contain raw HTML. XSS can happen when a user visits Special:UserRights but does not have rights to ch… CWE-79
Cross-site Scripting
CVE-2020-35475 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201578 6.1 MEDIUM
Network
mediawiki
fedoraproject
mediawiki
fedora
In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of MediaWiki:recentchanges-legend-watchlistexpiry can be changed onwiki so that t… CWE-79
Cross-site Scripting
CVE-2020-35474 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201579 9.8 CRITICAL
Network
spotweb_project spotweb Time-based SQL injection exists in Spotweb 1.4.9 via the query string. CWE-89
SQL Injection
CVE-2020-35545 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm
201580 8.1 HIGH
Network
fasterxml
netapp
debian
oracle
jackson-databind
service_level_manager
debian_linux
webcenter_portal
application_testing_suite
banking_platform
agile_plm
sd-wan_edge
communications_services_gatekeeper
ret…
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. CWE-502
 Deserialization of Untrusted Data
CVE-2020-35491 2024-11-21 14:27 2020-12-18 Show GitHub Exploit DB Packet Storm