Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255331 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の ATI Rage 128 ドライバにおける権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-3620 2011-03-18 15:30 2009-10-22 Show GitHub Exploit DB Packet Storm
255332 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の __scm_destroy 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2008-5029 2011-03-18 15:29 2008-11-10 Show GitHub Exploit DB Packet Storm
255333 5 警告 マイクロソフト - Microsoft Malware Protection Engine の一時ファイル作成に関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-1438 2011-03-18 15:24 2008-05-13 Show GitHub Exploit DB Packet Storm
255334 - - マイクロソフト - Microsoft Windows の RtlQueryRegistryValues() 関数におけるレジストリデータ検証不備の脆弱性 - CVE-2010-4398 2011-03-17 17:48 2010-11-29 Show GitHub Exploit DB Packet Storm
255335 7.5 危険 レッドハット
Wireshark
オラクル		 - Wireshark の LDSS 解析部の dissect_ldss_transfer 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4300 2011-03-17 17:43 2010-11-18 Show GitHub Exploit DB Packet Storm
255336 2.1 注意 VMware - VMware vCenter Server の vCenter Tomcat Management Application における権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-2928 2011-03-17 16:27 2011-02-10 Show GitHub Exploit DB Packet Storm
255337 5 警告 OpenBSD - OpenSSH の key_certify 関数におけるスタックメモリ領域の重要なコンテンツ情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-0539 2011-03-17 16:24 2011-02-10 Show GitHub Exploit DB Packet Storm
255338 9.3 危険 リアルネットワークス - RealNetworks RealPlayer における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2011-0694 2011-03-17 16:22 2011-02-8 Show GitHub Exploit DB Packet Storm
255339 5 警告 レッドハット
MIT Kerberos
オラクル		 - Kerberos の do_standalone 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4022 2011-03-17 15:51 2011-02-8 Show GitHub Exploit DB Packet Storm
255340 4.3 警告 アドビシステムズ - Adobe ColdFusion における Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2011-0584 2011-03-17 15:47 2011-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208141 5.5 MEDIUM
Local 		uclouvain
fedoraproject
oracle
debian 		openjpeg
fedora
outside_in_technology
debian_linux 		A flaw was found in OpenJPEG in versions prior to 2.4.0. This flaw allows an attacker to provide specially crafted input to the conversion or encoding functionality, causing an out-of-bounds read. Th… CWE-125
Out-of-bounds Read 		CVE-2020-27843 2024-11-21 14:21 2021-01-6 Show GitHub Exploit DB Packet Storm
208142 5.5 MEDIUM
Local 		uclouvain
fedoraproject
debian
redhat
oracle 		openjpeg
fedora
extra_packages_for_enterprise_linux
debian_linux
enterprise_linux
enterprise_linux_for_power_little_endian
enterprise_linux_for_ibm_z_systems
codeready_linux_buil… 		There's a flaw in openjpeg's t2 encoder in versions prior to 2.4.0. An attacker who is able to provide crafted input to be processed by openjpeg could cause a null pointer dereference. The highest im… - CVE-2020-27842 2024-11-21 14:21 2021-01-6 Show GitHub Exploit DB Packet Storm
208143 5.5 MEDIUM
Local 		uclouvain
fedoraproject
debian
oracle 		openjpeg
fedora
debian_linux
outside_in_technology 		There's a flaw in openjpeg in versions prior to 2.4.0 in src/lib/openjp2/pi.c. When an attacker is able to provide crafted input to be processed by the openjpeg encoder, this could cause an out-of-bo… - CVE-2020-27841 2024-11-21 14:21 2021-01-6 Show GitHub Exploit DB Packet Storm
208144 5.3 MEDIUM
Network 		docker docker util/binfmt_misc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.T… CWE-22
Path Traversal 		CVE-2020-27534 2024-11-21 14:21 2020-12-31 Show GitHub Exploit DB Packet Storm
208145 8.8 HIGH
Network 		dotcms dotcms dotCMS before 20.10.1 allows SQL injection, as demonstrated by the /api/v1/containers orderby parameter. The PaginatorOrdered classes that are used to paginate results of a REST endpoints do not sani… CWE-89
SQL Injection 		CVE-2020-27848 2024-11-21 14:21 2020-12-31 Show GitHub Exploit DB Packet Storm
208146 8.8 HIGH
Network 		1e client The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and … CWE-428
 Unquoted Search Path or Element 		CVE-2020-27645 2024-11-21 14:21 2020-12-30 Show GitHub Exploit DB Packet Storm
208147 8.8 HIGH
Network 		1e client The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and … CWE-428
 Unquoted Search Path or Element 		CVE-2020-27644 2024-11-21 14:21 2020-12-30 Show GitHub Exploit DB Packet Storm
208148 6.5 MEDIUM
Network 		1e client The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in protected directories (where they would not … CWE-59
Link Following 		CVE-2020-27643 2024-11-21 14:21 2020-12-30 Show GitHub Exploit DB Packet Storm
208149 6.4 MEDIUM
Physics 		gnome gnome_display_manager A flaw was found in GDM in versions prior to 3.38.2.1. A race condition in the handling of session shutdown makes it possible to bypass the lock screen for a user that has autologin enabled, accessin… - CVE-2020-27837 2024-11-21 14:21 2020-12-29 Show GitHub Exploit DB Packet Storm
208150 6.1 MEDIUM
Network 		techkshetrainfo savsoft_quiz A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field. CWE-79
Cross-site Scripting 		CVE-2020-27515 2024-11-21 14:21 2020-12-26 Show GitHub Exploit DB Packet Storm