Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255341 2.6 注意 オラクル - Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-01-14 15:01 2010-01-14 Show GitHub Exploit DB Packet Storm
255342 9.3 危険 マイクロソフト - Microsoft Internet Explorer に脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3672 2010-01-14 12:08 2009-11-25 Show GitHub Exploit DB Packet Storm
255343 9.3 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の java.lang パッケージにおける脆弱性 CWE-362
競合状態 		CVE-2009-2724 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255344 10 危険 サン・マイクロシステムズ
VMware		 - Sun Java SE の Provider クラスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2009-2721 2010-01-14 12:08 2009-08-10 Show GitHub Exploit DB Packet Storm
255345 5 警告 有限会社シースリー - WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0348 2010-01-12 15:01 2010-01-12 Show GitHub Exploit DB Packet Storm
255346 4.3 警告 有限会社シースリー - WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0349 2010-01-12 15:00 2010-01-12 Show GitHub Exploit DB Packet Storm
255347 10 危険 サイバートラスト株式会社
XEmacs		 - XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2688 2010-01-12 14:48 2009-08-5 Show GitHub Exploit DB Packet Storm
255348 6.8 警告 IBM - IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2746 2010-01-12 14:48 2009-11-13 Show GitHub Exploit DB Packet Storm
255349 5 警告 アップル - Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2009-2842 2010-01-7 12:09 2009-11-11 Show GitHub Exploit DB Packet Storm
255350 5.5 警告 シックス・アパート株式会社 - Movable Type におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2010-01-6 15:01 2010-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210831 9.8 CRITICAL
Network 		fortinet fortios An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second fact… CWE-287
CWE-178
Improper Authentication
 Improper Handling of Case Sensitivity 		CVE-2020-12812 2024-11-21 14:00 2020-07-25 Show GitHub Exploit DB Packet Storm
210832 6.7 MEDIUM
Local 		dlink dsl-7740c_firmware D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command. CWE-78
OS Command  		CVE-2020-12774 2024-11-21 14:00 2020-07-22 Show GitHub Exploit DB Packet Storm
210833 8.8 HIGH
Network 		seczetta neprofile A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of t… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-12854 2024-11-21 14:00 2020-07-16 Show GitHub Exploit DB Packet Storm
210834 9.8 CRITICAL
Network 		inetsoftware i-net_clear_reports XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a we… CWE-611
XXE 		CVE-2020-12684 2024-11-21 14:00 2020-07-16 Show GitHub Exploit DB Packet Storm
210835 4.6 MEDIUM
Physics 		yubico libykpiv
piv_tool_manager
yubikey_smart_card_minidriver 		An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. Thi… CWE-763
 Release of Invalid Pointer or Reference 		CVE-2020-13132 2024-11-21 14:00 2020-07-10 Show GitHub Exploit DB Packet Storm
210836 4.3 MEDIUM
Physics 		yubico libykpiv
piv_tool_manager
yubikey_smart_card_minidriver 		An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. … CWE-125
Out-of-bounds Read 		CVE-2020-13131 2024-11-21 14:00 2020-07-10 Show GitHub Exploit DB Packet Storm
210837 9.8 CRITICAL
Network 		protocol gossipsub Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack. NVD-CWE-noinfo
CVE-2020-12821 2024-11-21 14:00 2020-07-8 Show GitHub Exploit DB Packet Storm
210838 7.2 HIGH
Network 		code42 code42 Code42 environments with on-premises server versions 7.0.4 and earlier allow for possible remote code execution. When an administrator creates a local (non-SSO) user via a Code42-generated email, the… CWE-74
Injection 		CVE-2020-12736 2024-11-21 14:00 2020-07-8 Show GitHub Exploit DB Packet Storm
210839 8.8 HIGH
Network 		obdev little_snitch Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code execut… CWE-59
Link Following 		CVE-2020-13095 2024-11-21 14:00 2020-07-1 Show GitHub Exploit DB Packet Storm
210840 7.3 HIGH
Local 		boolebox boolebox BooleBox Secure File Sharing Utility before 4.2.3.0 allows CSV injection via a crafted user name that is mishandled during export from the activity logs in the Audit Area. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-13247 2024-11-21 14:00 2020-06-25 Show GitHub Exploit DB Packet Storm