Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255641	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox/SeaMonkey における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0177	2010-08-4 15:25	2010-03-30	Show	GitHub Exploit DB Packet Storm

255642	4.7	警告	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2394	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

255643	4.9	警告	オラクル	-	Oracle Solaris における GigaSwift Ethernet ドライバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2386	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

255644	5.6	警告	オラクル	-	Oracle Solaris における ZFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-2392	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

255645	6.2	警告	オラクル	-	Oracle Solaris における rdist の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2010-0916	2010-08-3 19:20	2010-07-13	Show	GitHub Exploit DB Packet Storm

255646	7.5	危険	OpenBSD FreeBSD オラクル NetBSD	-	複数の製品の ftpd におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-4247	2010-08-3 19:19	2008-09-25	Show	GitHub Exploit DB Packet Storm

255647	7.5	危険	ターボリナックス MySQL AB	-	MySQL で使用される yaSSL における複数のスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4484	2010-08-3 18:59	2009-12-30	Show	GitHub Exploit DB Packet Storm

255648	2.1	注意	オラクル	-	Oracle Database Server の Export コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0901	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

255649	2.6	注意	オラクル	-	Windows 上で稼働する Oracle Database Server の Network Layer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0900	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

255650	4.3	警告	オラクル	-	Oracle Database Server の Application Express コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-0892	2010-08-2 19:32	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208751	9.8	CRITICAL Network	idreamsoft	icms	iCMS 7.0.14 attackers to execute arbitrary OS commands via shell metacharacters in the DB_NAME parameter to install/install.php.	CWE-78 OS Command	CVE-2020-19527	2024-11-21 14:09	2020-12-11	Show	GitHub Exploit DB Packet Storm

208752	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	Stack-based buffer overflow and unconditional jump in ReadXPMImage in coders/xpm.c in ImageMagick 7.0.10-7.	CWE-787 Out-of-bounds Write	CVE-2020-19667	2024-11-21 14:09	2020-11-21	Show	GitHub Exploit DB Packet Storm

208753	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrar…	CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write	CVE-2020-1167	2024-11-21 14:09	2020-10-17	Show	GitHub Exploit DB Packet Storm

208754	8.8	HIGH Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could …	NVD-CWE-noinfo	CVE-2020-1080	2024-11-21 14:09	2020-10-17	Show	GitHub Exploit DB Packet Storm

208755	7.8	HIGH Local	microsoft	windows_10 windows_server_2019 windows_server_2016	<p>An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could …	NVD-CWE-noinfo	CVE-2020-1047	2024-11-21 14:09	2020-10-17	Show	GitHub Exploit DB Packet Storm

208756	5.3	MEDIUM Network	alibaba	nacos	Nacos 1.1.4 is affected by: Incorrect Access Control. An environment can be set up locally to get the service details interface. Then other Nacos service names can be accessed through the service lis…	NVD-CWE-noinfo	CVE-2020-19676	2024-11-21 14:09	2020-10-1	Show	GitHub Exploit DB Packet Storm

208757	9.8	CRITICAL Network	niushop	niushop	Niushop B2B2C Multi-business basic version V1.11, can bypass the administrator to obtain the background upload interface, through parameter upload, bypass the getimagesize function, upload php file, …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-19672	2024-11-21 14:09	2020-10-1	Show	GitHub Exploit DB Packet Storm

208758	4.9	MEDIUM Network	niushop	niushop	In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.	CWE-306 Missing Authentication for Critical Function	CVE-2020-19670	2024-11-21 14:09	2020-10-1	Show	GitHub Exploit DB Packet Storm

208759	7.5	HIGH Network	jdownloads	jdownloads	SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.	CWE-89 SQL Injection	CVE-2020-19455	2024-11-21 14:09	2020-09-26	Show	GitHub Exploit DB Packet Storm

208760	7.5	HIGH Network	jdownloads	jdownloads	SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.	CWE-89 SQL Injection	CVE-2020-19451	2024-11-21 14:09	2020-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed