Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255601 9.3 危険 マイクロソフト - Microsoft Windows の SMB クライアント実装における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0016 2010-03-1 11:35 2010-02-9 Show GitHub Exploit DB Packet Storm
255602 5 警告 日立 - uCosminexus Portal Framework におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-02-26 11:36 2010-01-29 Show GitHub Exploit DB Packet Storm
255603 2.6 注意 tDiary開発プロジェクト - tDiary 付属のプラグイン tb-send.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0726 2010-02-25 15:03 2010-02-25 Show GitHub Exploit DB Packet Storm
255604 4.3 警告 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server における HTTP リクエストを非表示にされる脆弱性 CWE-Other
その他 		CVE-2003-1578 2010-02-25 12:36 2003-11-14 Show GitHub Exploit DB Packet Storm
255605 2.6 注意 サン・マイクロシステムズ - Sun ONE/iPlanet Web Server におけるログファイルに任意のテキストを挿入される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2003-1577 2010-02-25 12:36 2003-11-14 Show GitHub Exploit DB Packet Storm
255606 5 警告 IBM - IBM WebSphere Application Server の Single Sign-on 機能における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0563 2010-02-25 12:35 2010-02-5 Show GitHub Exploit DB Packet Storm
255607 5 警告 アップル - Apple Safari の WebKit における任意の Web サイトにリクエストされる脆弱性 CWE-Other
その他 		CVE-2009-2841 2010-02-25 12:33 2009-11-11 Show GitHub Exploit DB Packet Storm
255608 10 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-3384 2010-02-25 12:33 2009-11-11 Show GitHub Exploit DB Packet Storm
255609 7.1 危険 Linux
レッドハット		 - Linux kernel の icmp_send 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-0778 2010-02-25 12:33 2009-03-12 Show GitHub Exploit DB Packet Storm
255610 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の audit_syscall_entry 関数におけるシステムコール監査設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0834 2010-02-25 12:33 2009-03-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211751 7.8 HIGH
Local 		youhua windows_master In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact b… CWE-20
 Improper Input Validation  		CVE-2020-13634 2024-11-21 14:01 2020-05-30 Show GitHub Exploit DB Packet Storm
211752 9.8 CRITICAL
Network 		bbpress bbpress An unauthenticated privilege-escalation issue exists in the bbPress plugin before 2.6.5 for WordPress when New User Registration is enabled. NVD-CWE-noinfo
CVE-2020-13693 2024-11-21 14:01 2020-05-29 Show GitHub Exploit DB Packet Storm
211753 4.8 MEDIUM
Network 		cmsmadesimple cms_made_simple CMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name. CWE-79
Cross-site Scripting 		CVE-2020-13660 2024-11-21 14:01 2020-05-29 Show GitHub Exploit DB Packet Storm
211754 7.5 HIGH
Network 		jerryscript jerryscript parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and a scanner_scan_all a… CWE-754
CWE-476
CWE-617
 Improper Check for Unusual or Exceptional Conditions
 NULL Pointer Dereference
 Reachable Assertion 		CVE-2020-13649 2024-11-21 14:01 2020-05-29 Show GitHub Exploit DB Packet Storm
211755 3.2 LOW
Local 		qemu
debian
opensuse
canonical 		qemu
debian_linux
leap
ubuntu_linux 		In QEMU 5.0.0 and earlier, megasas_lookup_frame in hw/scsi/megasas.c has an out-of-bounds read via a crafted reply_queue_head field from a guest OS user. CWE-125
Out-of-bounds Read 		CVE-2020-13362 2024-11-21 14:01 2020-05-29 Show GitHub Exploit DB Packet Storm
211756 3.9 LOW
Local 		qemu
debian
opensuse
canonical 		qemu
debian_linux
leap
ubuntu_linux 		In QEMU 5.0.0 and earlier, es1370_transfer_audio in hw/audio/es1370.c does not properly validate the frame count, which allows guest OS users to trigger an out-of-bounds access during an es1370_write… CWE-787
 Out-of-bounds Write 		CVE-2020-13361 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
211757 6.5 MEDIUM
Network 		gnome
canonical
fedoraproject
netapp
broadcom 		balsa
glib-networking
ubuntu_linux
fedora
cloud_backup
fabric_operating_system 		In GNOME glib-networking through 2.64.2, the implementation of GTlsClientConnection skips hostname verification of the server's TLS certificate if the application fails to specify the expected server… CWE-295
Improper Certificate Validation  		CVE-2020-13645 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
211758 5.4 MEDIUM
Network 		pickplugins accordion An issue was discovered in the Accordion plugin before 2.2.9 for WordPress. The unprotected AJAX wp_ajax_accordions_ajax_import_json action allowed any authenticated user with Subscriber or higher pe… CWE-79
Cross-site Scripting 		CVE-2020-13644 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
211759 8.8 HIGH
Network 		siteorigin page_builder An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The live editor feature did not do any nonce verification, allowing for requests to be forged on behalf of … CWE-352
 Origin Validation Error 		CVE-2020-13643 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm
211760 8.8 HIGH
Network 		siteorigin page_builder An issue was discovered in the SiteOrigin Page Builder plugin before 2.10.16 for WordPress. The action_builder_content function did not do any nonce verification, allowing for requests to be forged o… CWE-352
 Origin Validation Error 		CVE-2020-13642 2024-11-21 14:01 2020-05-28 Show GitHub Exploit DB Packet Storm