Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255531 5.7 警告 日本電気
インターネットイニシアティブ
ヤマハ
古河電気工業		 - IPv6 を実装した複数の製品にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		- 2010-01-25 11:47 2009-10-26 Show GitHub Exploit DB Packet Storm
255532 9.3 危険 マイクロソフト - 複数の Microsoft 製品のテキストコンバーターにおける整数オーバーフローの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2506 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
255533 9 危険 マイクロソフト - Microsoft Windows の Active Directory フェデレーションサービスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2509 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
255534 6.9 警告 マイクロソフト - Microsoft Windows の Active Directory フェデレーションサービスのシングルサインオン実装における認証情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2508 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
255535 6.8 警告 マイクロソフト - Microsoft Windows の LSASS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3675 2010-01-22 10:27 2009-12-8 Show GitHub Exploit DB Packet Storm
255536 9.3 危険 マイクロソフト - Microsoft Project における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0102 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
255537 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3673 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
255538 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3671 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
255539 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性 CWE-255
CWE-94
CVE-2009-3677 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
255540 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2505 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211641 5.3 MEDIUM
Local 		linux
fedoraproject
opensuse
debian
canonical
netapp 		linux_kernel
fedora
leap
debian_linux
ubuntu_linux
cloud_backup
element_software
steelstore_cloud_integrated_storage
solidfire
hci_management_node
active_iq_unified_mana… 		The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-12888 2024-11-21 14:00 2020-05-16 Show GitHub Exploit DB Packet Storm
211642 7.8 HIGH
Local 		sun-denshi universal_forensic_extraction_device_firmware Cellebrite UFED 5.0 to 7.5.0.845 implements local operating system policies that can be circumvented to obtain a command prompt via the Windows file dialog that is reachable via the Certificate-Based… CWE-269
 Improper Privilege Management 		CVE-2020-12798 2024-11-21 14:00 2020-05-16 Show GitHub Exploit DB Packet Storm
211643 9.8 CRITICAL
Network 		eq-3 homematic_ccu2_firmware
ccu3_firmware 		eQ-3 Homematic Central Control Unit (CCU)2 through 2.51.6 and CCU3 through 3.51.6 allow Remote Code Execution in the JSON API Method ReGa.runScript, by unauthenticated attackers with access to the we… CWE-276
Incorrect Default Permissions  		CVE-2020-12834 2024-11-21 14:00 2020-05-16 Show GitHub Exploit DB Packet Storm
211644 6.1 MEDIUM
Network 		redhat interchange XSS in the admin help system admin/help.html and admin/quicklinks.html in Interchange 4.7.0 through 5.11.x allows remote attackers to steal credentials or data via browser JavaScript. CWE-79
Cross-site Scripting 		CVE-2020-12685 2024-11-21 14:00 2020-05-16 Show GitHub Exploit DB Packet Storm
211645 5.4 MEDIUM
Network 		rcos submitty Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow. CWE-79
Cross-site Scripting 		CVE-2020-12882 2024-11-21 14:00 2020-05-15 Show GitHub Exploit DB Packet Storm
211646 7.5 HIGH
Network 		veritas aptare Veritas APTARE versions prior to 10.4 allowed sensitive information to be accessible without authentication. CWE-306
Missing Authentication for Critical Function 		CVE-2020-12877 2024-11-21 14:00 2020-05-15 Show GitHub Exploit DB Packet Storm
211647 7.5 HIGH
Network 		veritas aptare Veritas APTARE versions prior to 10.4 allowed remote users to access several unintended files on the server. This vulnerability only impacts Windows server deployments. CWE-863
 Incorrect Authorization 		CVE-2020-12876 2024-11-21 14:00 2020-05-15 Show GitHub Exploit DB Packet Storm
211648 6.3 MEDIUM
Network 		veritas aptare Veritas APTARE versions prior to 10.4 did not perform adequate authorization checks. An authenticated user could gain unauthorized access to sensitive information or functionality by manipulating spe… CWE-863
 Incorrect Authorization 		CVE-2020-12875 2024-11-21 14:00 2020-05-15 Show GitHub Exploit DB Packet Storm
211649 9.8 CRITICAL
Network 		veritas aptare Veritas APTARE versions prior to 10.4 included code that bypassed the normal login process when specific authentication credentials were provided to the server. CWE-287
Improper Authentication 		CVE-2020-12874 2024-11-21 14:00 2020-05-15 Show GitHub Exploit DB Packet Storm
211650 6.1 MEDIUM
Network 		progress moveit_automation An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execu… CWE-79
Cross-site Scripting 		CVE-2020-12677 2024-11-21 14:00 2020-05-15 Show GitHub Exploit DB Packet Storm