Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255831	6.8	警告	アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカード OpenSSL Project レッドハット	-	OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2007-5135	2010-01-5 13:31	2007-10-12	Show	GitHub Exploit DB Packet Storm

255832	7.8	危険	マイクロソフト	-	Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1928	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255833	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255834	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255835	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255836	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

255837	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

255838	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

255839	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209041	9.8	CRITICAL Network	extremenetworks	aerohive_netconfig	The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP reque…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2020-16152	2024-11-21 14:06	2021-11-15	Show	GitHub Exploit DB Packet Storm

209042	6.5	MEDIUM Network	google	angle	Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page.	CWE-125 Out-of-bounds Read	CVE-2020-16048	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209043	4.3	MEDIUM Network	fortinet	fortiadc	A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as user…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-15935	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209044	5.4	MEDIUM Network	fortinet	forticlient_enterprise_management_server	An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via…	CWE-79 Cross-site Scripting	CVE-2020-15940	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

209045	5.4	MEDIUM Network	fortinet	forticlient_endpoint_management_server	A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete…	CWE-22 Path Traversal	CVE-2020-15941	2024-11-21 14:06	2021-10-6	Show	GitHub Exploit DB Packet Storm

209046	4.3	MEDIUM Network	fortinet	fortisandbox	An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration …	NVD-CWE-Other	CVE-2020-15939	2024-11-21 14:06	2021-09-7	Show	GitHub Exploit DB Packet Storm

209047	9.8	CRITICAL Network	govicture	pc420_firmware	Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420…	CWE-787 Out-of-bounds Write	CVE-2020-15744	2024-11-21 14:06	2021-08-30	Show	GitHub Exploit DB Packet Storm

209048	5.9	MEDIUM Network	fehcom	s\/qmail	In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credential…	CWE-77 Command Injection	CVE-2020-15955	2024-11-21 14:06	2021-08-18	Show	GitHub Exploit DB Packet Storm

209049	6.1	MEDIUM Network	egain	chat	eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.	CWE-79 Cross-site Scripting	CVE-2020-15948	2024-11-21 14:06	2021-07-30	Show	GitHub Exploit DB Packet Storm

209050	7.5	HIGH Network	bitdefender	antivirus_plus total_security internet_security	Improper Certificate Validation vulnerability in the Online Threat Prevention module as used in Bitdefender Total Security allows an attacker to potentially bypass HTTP Strict Transport Security (HST…	CWE-295 Improper Certificate Validation	CVE-2020-15732	2024-11-21 14:06	2021-06-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed