Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255551	6.5	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	PostgreSQL の core server コンポーネントにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3230	2010-01-19 15:49	2009-09-17	Show	GitHub Exploit DB Packet Storm

255552	7.5	危険	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-2315	2010-01-19 15:48	2008-08-1	Show	GitHub Exploit DB Packet Storm

255553	7.5	危険	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の zlib 拡張モジュールにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2008-1721	2010-01-19 15:48	2008-04-10	Show	GitHub Exploit DB Packet Storm

255554	6.8	警告	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の imageop.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2008-1679	2010-01-19 15:48	2008-04-22	Show	GitHub Exploit DB Packet Storm

255555	5.8	警告	アップルサイバートラスト株式会社 Python Software Foundation サン・マイクロシステムズレッドハット	-	Python の imageop モジュールにおける複数の整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2007-4965	2010-01-19 15:47	2007-09-18	Show	GitHub Exploit DB Packet Storm

255556	7.5	危険	アップル	-	Mac OS X 用の Java における任意のコードを実行される脆弱性	CWE-310 暗号の問題	CVE-2009-2843	2010-01-18 12:22	2009-12-3	Show	GitHub Exploit DB Packet Storm

255557	6.8	警告	アップル GNU Project サン・マイクロシステムズサイバートラスト株式会社レッドハット	-	GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性	-	CVE-2007-4131	2010-01-18 12:21	2007-08-23	Show	GitHub Exploit DB Packet Storm

255558	4.6	警告	IBM	-	IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4150	2010-01-15 14:10	2009-12-2	Show	GitHub Exploit DB Packet Storm

255559	2.1	注意	サン・マイクロシステムズ	-	Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-4080	2010-01-15 14:10	2009-11-24	Show	GitHub Exploit DB Packet Storm

255560	5	警告	サン・マイクロシステムズ	-	Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4075	2010-01-15 14:09	2009-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197731	4.3	MEDIUM Network	yandex	yandex_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of the Yandex Browser allows an attacker to obfuscate the true source of data as presented in the browse…	CWE-306 Missing Authentication for Critical Function	CVE-2020-7369	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

197732	4.3	MEDIUM Network	ucweb	uc_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browse…	NVD-CWE-Other	CVE-2020-7364	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

197733	4.3	MEDIUM Network	ucweb	uc_browser	User Interface (UI) Misrepresentation of Critical Information vulnerability in the address bar of UCWeb's UC Browser allows an attacker to obfuscate the true source of data as presented in the browse…	NVD-CWE-noinfo	CVE-2020-7363	2024-11-21 14:37	2020-10-21	Show	GitHub Exploit DB Packet Storm

197734	7.6	HIGH Network	osm-static-maps_project	osm-static-maps	This affects all versions of package osm-static-maps. User input given to the package is passed directly to a template without escaping ({{{ ... }}}). As such, it is possible for an attacker to injec…	CWE-79 CWE-74 Cross-site Scripting Injection	CVE-2020-7749	2024-11-21 14:37	2020-10-20	Show	GitHub Exploit DB Packet Storm

197735	8.1	HIGH Network	ts.ed_project	ts.ed	This affects the package @tsed/core before 5.65.7. This vulnerability relates to the deepExtend function which is used as part of the utils directory. Depending on if user input is provided, an attac…	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7748	2024-11-21 14:37	2020-10-20	Show	GitHub Exploit DB Packet Storm

197736	6.3	MEDIUM Network	lightning-viz	lightning	This affects all versions of package lightning-server. It is possible to inject malicious JavaScript code as part of a session controller.	CWE-79 Cross-site Scripting	CVE-2020-7747	2024-11-21 14:37	2020-10-20	Show	GitHub Exploit DB Packet Storm

197737	7.1	HIGH Network	mintegral	mintegraladsdk	This affects the package MintegralAdSDK before 6.6.0.0. The SDK distributed by the company contains malicious functionality that acts as a backdoor. Mintegral and their partners (advertisers) can rem…	CWE-94 Code Injection	CVE-2020-7745	2024-11-21 14:37	2020-10-19	Show	GitHub Exploit DB Packet Storm

197738	8.8	HIGH Network	siemens	siport_mp	A vulnerability has been identified in SIPORT MP (All versions < 3.2.1). Vulnerable versions of the device could allow an authenticated attacker to impersonate other users of the system and perform (…	-	CVE-2020-7591	2024-11-21 14:37	2020-10-16	Show	GitHub Exploit DB Packet Storm

197739	4.7	MEDIUM Network	mintegral	mintegraladsdk	This affects all versions of package com.mintegral.msdk:alphab. The Android SDK distributed by the company contains malicious functionality in this module that tracks: 1. Downloads from Google urls e…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-7744	2024-11-21 14:37	2020-10-15	Show	GitHub Exploit DB Packet Storm

197740	6.7	MEDIUM Local	mcafee	mvision_endpoint_detection_and_response	Improperly implemented security check in McAfee MVISION Endpoint Detection and Response Client (MVEDR) prior to 3.2.0 may allow local administrators to execute malicious code via stopping a core Wind…	CWE-290 Authentication Bypass by Spoofing	CVE-2020-7327	2024-11-21 14:37	2020-10-15	Show	GitHub Exploit DB Packet Storm