Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255741	7.2	危険	IBM	-	IBM DB2 の Engine Utilities コンポーネントの db2licm における脆弱性	CWE-noinfo 情報不足	CVE-2009-4330	2010-02-4 11:18	2009-12-16	Show	GitHub Exploit DB Packet Storm

255742	4	警告	IBM	-	IBM DB2 の Engine Utilities コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4329	2010-02-4 11:18	2009-12-16	Show	GitHub Exploit DB Packet Storm

255743	7.2	危険	サイバートラスト株式会社 Linux	-	Linux kernel の kvm_dev_ioctl_get_supported_cpuid 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3638	2010-02-3 14:35	2009-10-29	Show	GitHub Exploit DB Packet Storm

255744	5	警告	Linear LLC S2 Security	-	Linear eMerge のマネージメントコンポーネントにおけるサービス運用妨害 (DoS)	CWE-noinfo 情報不足	CVE-2009-3734	2010-02-3 14:35	2010-01-5	Show	GitHub Exploit DB Packet Storm

255745	7.5	危険	The PHP Group LibGD project サイバートラスト株式会社レッドハット	-	PHP および GD Graphics Library の _gdGetColors 関数におけるバッファオーバーフローの脆弱性	CWE-Other その他	CVE-2009-3546	2010-02-3 14:34	2009-10-19	Show	GitHub Exploit DB Packet Storm

255746	6.8	警告	GNU Project XEmacs サイバートラスト株式会社	-	Emacs および XEmacs における .flc ファイルの処理に関する任意のコードを実行される脆弱性	CWE-DesignError	CVE-2008-2142	2010-02-2 11:43	2008-05-12	Show	GitHub Exploit DB Packet Storm

255747	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Menu モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4370	2010-02-2 11:43	2009-12-16	Show	GitHub Exploit DB Packet Storm

255748	3.5	注意	Drupal サイバートラスト株式会社	-	Drupal の Contact モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4369	2010-02-2 11:42	2009-12-16	Show	GitHub Exploit DB Packet Storm

255749	7.5	危険	日立	-	Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-02-2 11:42	2009-12-22	Show	GitHub Exploit DB Packet Storm

255750	4.3	警告	VMware	-	複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-3731	2010-02-1 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209201	8.8	HIGH Network	zohocorp	manageengine_applications_manager	Zoho ManageEngine Applications Manager version 14740 and prior allows an authenticated SQL Injection via a crafted jsp request in the SAP module.	CWE-89 SQL Injection	CVE-2020-15927	2024-11-21 14:06	2020-10-7	Show	GitHub Exploit DB Packet Storm

209202	9.8	CRITICAL Network	mitsubishielectric	qj71mes96_firmware qj71ws96_firmware q06ccpu-v_firmware q24dhccpu-v_firmware q24dhccpu-vg_firmware r12ccpu-v_firmware rd55up06-v_firmware rd55up12-v_firmware rj71gn11-t2_firmw…	Multiple Mitsubishi Electric products are vulnerable to impersonations of a legitimate device by a malicious actor, which may allow an attacker to remotely execute arbitrary commands.	-	CVE-2020-16226	2024-11-21 14:06	2020-10-6	Show	GitHub Exploit DB Packet Storm

209203	7.8	HIGH Local	fatek	winproladder	In PLC WinProladder Version 3.28 and prior, a stack-based buffer overflow vulnerability can be exploited when a valid user opens a specially crafted file, which may allow an attacker to remotely exec…	-	CVE-2020-16234	2024-11-21 14:06	2020-10-1	Show	GitHub Exploit DB Packet Storm

209204	7.2	HIGH Network	re-desk	re\	Re:Desk 2.3 has a blind authenticated SQL injection vulnerability in the SettingsController class, in the actionEmailTemplates() method. A malicious actor with access to an administrative account cou…	CWE-89 SQL Injection	CVE-2020-15849	2024-11-21 14:06	2020-10-1	Show	GitHub Exploit DB Packet Storm

209205	3.6	LOW Local	bitdefender	engines	An improper Input Validation vulnerability in the code handling file renaming and recovery in Bitdefender Engines allows an attacker to write an arbitrary file in a location hardcoded in a specially-…	CWE-20 Improper Input Validation	CVE-2020-15731	2024-11-21 14:06	2020-09-30	Show	GitHub Exploit DB Packet Storm

209206	7.3	HIGH Local	actfax	actfax	ActFax Version 7.10 Build 0335 (2020-05-25) is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client\, %PROGRAMFILES%\ActiveFax\Ins…	CWE-276 Incorrect Default Permissions	CVE-2020-15843	2024-11-21 14:06	2020-09-25	Show	GitHub Exploit DB Packet Storm

209207	9.8	CRITICAL Network	nakivo	backup_\&_replication_transporter	Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a netw…	CWE-306 Missing Authentication for Critical Function	CVE-2020-15851	2024-11-21 14:06	2020-09-25	Show	GitHub Exploit DB Packet Storm

209208	7.8	HIGH Local	nakivo	backup_\&_replication_director	Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because …	CWE-276 Incorrect Default Permissions	CVE-2020-15850	2024-11-21 14:06	2020-09-25	Show	GitHub Exploit DB Packet Storm

209209	6.1	MEDIUM Network	joplin_project	joplin	An XSS issue in Joplin desktop 1.0.190 to 1.0.245 allows arbitrary code execution via a malicious HTML embed tag.	CWE-79 Cross-site Scripting	CVE-2020-15930	2024-11-21 14:06	2020-09-25	Show	GitHub Exploit DB Packet Storm

209210	5.3	MEDIUM Network	liferay	dxp liferay_portal	In Liferay Portal before 7.3.1, Liferay Portal 6.2 EE, and Liferay DXP 7.2, DXP 7.1 and DXP 7.0, the property 'portlet.resource.id.banned.paths.regexp' can be bypassed with doubled encoded URLs.	NVD-CWE-noinfo	CVE-2020-15840	2024-11-21 14:06	2020-09-25	Show	GitHub Exploit DB Packet Storm