Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255611	9	危険	シスコシステムズ	-	Cisco Mediator Framework におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-0597	2010-06-16 18:31	2010-05-26	Show	GitHub Exploit DB Packet Storm

255612	9	危険	シスコシステムズ	-	Cisco Mediator Framework における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-0596	2010-06-16 18:31	2010-05-26	Show	GitHub Exploit DB Packet Storm

255613	10	危険	シスコシステムズ	-	Cisco Mediator Framework におけるアクセス権限を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-0595	2010-06-16 18:31	2010-05-26	Show	GitHub Exploit DB Packet Storm

255614	4	警告	サイバートラスト株式会社 MIT Kerberos ターボリナックスレッドハット	-	MIT Kerberos の kadmind におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-0629	2010-06-16 16:17	2010-04-6	Show	GitHub Exploit DB Packet Storm

255615	6.4	警告	OpenSSL Project	-	OpenSSL の EVP_PKEY_verify_recover 関数における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1633	2010-06-15 18:26	2010-06-1	Show	GitHub Exploit DB Packet Storm

255616	3.6	注意	レッドハット	-	RHEL の yum-rhn-plugin における Red Hat Network プロファイルを閲覧される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1439	2010-06-15 18:25	2010-06-1	Show	GitHub Exploit DB Packet Storm

255617	9.3	危険	アドビシステムズ	-	Adobe Photoshop CS4 におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1296	2010-06-15 18:25	2010-05-26	Show	GitHub Exploit DB Packet Storm

255618	5	警告	日立	-	Groupmax World Wide Web Desktop におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2010-06-14 16:24	2010-05-26	Show	GitHub Exploit DB Packet Storm

255619	4.3	警告	日立	-	Hitachi Web Server の SSL クライアント認証における CRL 失効確認不可の脆弱性	CWE-287 不適切な認証	-	2010-06-14 16:24	2010-05-17	Show	GitHub Exploit DB Packet Storm

255620	5	警告	日立	-	TP1/Message Control におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-06-14 16:23	2010-05-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197491	7.5	HIGH Network	microchip	syncserver_s100_firmware syncserver_s200_firmware syncserver_s250_firmware syncserver_s300_firmware syncserver_s350_firmware	Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices mishandle session validation, leading to unauthenticated creation, modification, or elimination of us…	NVD-CWE-noinfo	CVE-2020-9034	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197492	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.	CWE-79 Cross-site Scripting	CVE-2020-9016	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197493	4.3	MEDIUM Network	arvato	skillpipe	Arvato Skillpipe 3.0 allows attackers to bypass intended print restrictions by deleting <div id="watermark"> from the HTML source code.	CWE-20 Improper Input Validation	CVE-2020-9013	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197494	6.1	MEDIUM Network	gluu	gluu_server	A cross-site scripting (XSS) vulnerability in the Import People functionality in Gluu Identity Configuration 4.0 allows remote attackers to inject arbitrary web script or HTML via the filename parame…	CWE-79 Cross-site Scripting	CVE-2020-9012	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197495	5.4	MEDIUM Network	codologic	codoforum	Codoforum 4.8.8 allows self-XSS via the title of a new topic.	CWE-79 Cross-site Scripting	CVE-2020-9007	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197496	8.8	HIGH Adjacent	abbott	freestyle_libre_firmware	Older generation Abbott FreeStyle Libre sensors allow remote attackers within close proximity to enable write access to memory via a specific NFC unlock command. NOTE: The vulnerability is not presen…	CWE-787 Out-of-bounds Write	CVE-2020-8997	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197497	4.3	MEDIUM Network	aishu	anyshare_cloud	AnyShare Cloud 6.0.9 allows authenticated directory traversal to read files, as demonstrated by the interface/downloadwithpath/downloadfile/?filepath=/etc/passwd URI.	CWE-22 Path Traversal	CVE-2020-8996	2024-11-21 14:39	2020-02-17	Show	GitHub Exploit DB Packet Storm

197498	5.4	MEDIUM Network	ninjaforms	ninja_forms	The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms…	CWE-79 Cross-site Scripting	CVE-2020-8594	2024-11-21 14:39	2020-02-15	Show	GitHub Exploit DB Packet Storm

197499	7.4	HIGH Network	istio	istio	An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at …	CWE-20 Improper Input Validation	CVE-2020-8843	2024-11-21 14:39	2020-02-15	Show	GitHub Exploit DB Packet Storm

197500	9.0	CRITICAL Network	progess progress	moveit_transfer	In Progress MOVEit Transfer 2019.1 before 2019.1.4 and 2019.2 before 2019.2.1, a REST API endpoint failed to adequately sanitize malicious input, which could allow an authenticated attacker to execut…	CWE-79 Cross-site Scripting	CVE-2020-8612	2024-11-21 14:39	2020-02-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed