Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255281 10 危険 サイバートラスト株式会社
レッドハット
SystemTap		 - SystemTap の stap-server における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4273 2010-03-16 11:14 2010-01-26 Show GitHub Exploit DB Packet Storm
255282 6.5 警告 サイバートラスト株式会社
Linux
レッドハット		 - KVM の x86 エミュレータにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0298 2010-03-16 11:13 2010-02-9 Show GitHub Exploit DB Packet Storm
255283 4.4 警告 サイバートラスト株式会社
Fabrice Bellard
レッドハット		 - QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0297 2010-03-16 11:13 2010-02-9 Show GitHub Exploit DB Packet Storm
255284 6.8 警告 サン・マイクロシステムズ
freedesktop.org		 - Poppler における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3605 2010-03-15 16:40 2009-11-2 Show GitHub Exploit DB Packet Storm
255285 4.1 警告 Linux
レッドハット		 - Linux kernel の smbfs に関する脆弱性 - CVE-2006-5871 2010-03-15 16:40 2005-10-5 Show GitHub Exploit DB Packet Storm
255286 7.8 危険 Linux
レッドハット		 - Linux kernel の selinux_parse_skb_ipv6 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2005-4886 2010-03-15 16:40 2005-10-5 Show GitHub Exploit DB Packet Storm
255287 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2003-1589 2010-03-15 16:39 2003-12-2 Show GitHub Exploit DB Packet Storm
255288 5 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2003-1590 2010-03-15 16:39 2003-08-13 Show GitHub Exploit DB Packet Storm
255289 7.1 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3722 2010-03-15 15:23 2009-10-30 Show GitHub Exploit DB Packet Storm
255290 4.3 警告 シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン) - APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4406 2010-03-12 15:13 2009-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198661 8.1 HIGH
Network 		pivotal_software spring_batch When configured to enable default typing, Jackson contained a deserialization vulnerability that could lead to arbitrary code execution. Jackson fixed this vulnerability by blacklisting known "deseri… CWE-502
 Deserialization of Untrusted Data 		CVE-2020-5411 2024-11-21 14:34 2020-06-12 Show GitHub Exploit DB Packet Storm
198662 8.8 HIGH
Network 		zenphoto zenphoto Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file. CWE-94
Code Injection 		CVE-2020-5593 2024-11-21 14:34 2020-06-11 Show GitHub Exploit DB Packet Storm
198663 6.1 MEDIUM
Network 		zenphoto zenphoto Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2020-5592 2024-11-21 14:34 2020-06-11 Show GitHub Exploit DB Packet Storm
198664 6.7 MEDIUM
Local 		dell latitude_5300_firmware
latitude_5300_2-in-1_firmware
latitude_5400_firmware
latitude_5401_firmware
latitude_5500_firmware
latitude_5501_firmware
latitude_7200_2_in_1_firmware
lat… 		Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Ad… NVD-CWE-Other
CVE-2020-5363 2024-11-21 14:34 2020-06-11 Show GitHub Exploit DB Packet Storm
198665 8.8 HIGH
Adjacent 		sony wf-1000x_firmware
wf-sp700n_firmware
wh-1000xm2_firmware
wh-1000xm3_firmware
wh-ch700n_firmware
wh-h900n_firmware
wh-xb700_firmware
wh-xb900n_firmware
wi-1000x_firmware
wi-… 		SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH-1000XM3, WH-CH700N, WH-H900N, WH-XB700, WH-XB900N, WI-1000X, WI-C600N and WI-SP600N with firmware versions prior to 4.5.2 have vulnerabili… CWE-306
Missing Authentication for Critical Function 		CVE-2020-5589 2024-11-21 14:34 2020-06-9 Show GitHub Exploit DB Packet Storm
198666 7.5 HIGH
Network 		xack xack_dns XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23, 1.7.0 to 1.7.18, and versions before 1.7.0 allow remote attackers to cause a denial of service condition resulting in degradation of the … CWE-674
 Uncontrolled Recursion 		CVE-2020-5591 2024-11-21 14:34 2020-06-6 Show GitHub Exploit DB Packet Storm
198667 7.5 HIGH
Network 		vmware spring_cloud_config Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configuration files through the spring-cloud-co… CWE-22
Path Traversal 		CVE-2020-5410 2024-11-21 14:34 2020-06-3 Show GitHub Exploit DB Packet Storm
198668 4.6 MEDIUM
Physics 		cybozu kintone Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors. CWE-200
Information Exposure 		CVE-2020-5573 2024-11-21 14:34 2020-05-29 Show GitHub Exploit DB Packet Storm
198669 4.6 MEDIUM
Physics 		cybozu mailwise Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. CWE-200
Information Exposure 		CVE-2020-5572 2024-11-21 14:34 2020-05-29 Show GitHub Exploit DB Packet Storm
198670 9.8 CRITICAL
Network 		cybozu desktop Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2020-5537 2024-11-21 14:34 2020-05-25 Show GitHub Exploit DB Packet Storm