Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255891 7.9 危険 日本電気
サイバートラスト株式会社
MIT Kerberos
ヒューレット・パッカード
ターボリナックス
レッドハット		 - MIT Kerberos 5 RPC ライブラリの gssrpc_svcauth_unix() 関数における任意のコードを実行される脆弱性 - CVE-2007-2443 2010-07-15 17:19 2007-06-26 Show GitHub Exploit DB Packet Storm
255892 9.3 危険 日本電気
サイバートラスト株式会社
MIT Kerberos
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット		 - MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性 - CVE-2007-2442 2010-07-15 17:19 2007-06-26 Show GitHub Exploit DB Packet Storm
255893 4.3 警告 VMware - 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2277 2010-07-14 17:27 2010-03-29 Show GitHub Exploit DB Packet Storm
255894 6.9 警告 VMware - 複数の VMware 製品の USB サービス における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1140 2010-07-14 17:27 2010-04-9 Show GitHub Exploit DB Packet Storm
255895 9.3 危険 シマンテック - Symantec Workspace Streaming (旧 Symantec AppStream) に脆弱性 CWE-287
不適切な認証 		CVE-2008-4389 2010-07-14 17:26 2010-06-22 Show GitHub Exploit DB Packet Storm
255896 5.8 警告 アップル - Apple iOS の設定アプリケーションにおけるユーザを追跡可能な脆弱性 CWE-DesignError
CVE-2010-1756 2010-07-14 17:26 2010-06-22 Show GitHub Exploit DB Packet Storm
255897 4.3 警告 アップル - Apple iOS の Safari におけるリモートの Web サーバがユーザを追跡可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1755 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
255898 1.9 注意 アップル - Apple iOS の パスコードロックにおける任意のデータにアクセスされる脆弱性 CWE-362
競合状態 		CVE-2010-1775 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
255899 6.9 警告 アップル - Apple iOS の パスコードロックにおけるパスコード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1754 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
255900 6.8 警告 アップル - Apple iOS の ImageIO における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1753 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211561 8.8 HIGH
Network 		apache
debian
oracle 		velocity_engine
wss4j
debian_linux
retail_order_broker
banking_platform
communications_network_integrity
banking_enterprise_default_management
banking_party_management
utiliti… 		An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This appl… NVD-CWE-noinfo
CVE-2020-13936 2024-11-21 14:02 2021-03-10 Show GitHub Exploit DB Packet Storm
211562 7.5 HIGH
Network 		apache
oracle 		thrift
hive
communications_cloud_native_core_network_slice_selection_function
communications_cloud_native_core_policy 		In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13949 2024-11-21 14:02 2021-02-13 Show GitHub Exploit DB Packet Storm
211563 6.1 MEDIUM
Network 		apache
oracle 		activemq
communications_session_route_manager
communications_session_report_manager 		An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0. CWE-79
Cross-site Scripting 		CVE-2020-13947 2024-11-21 14:02 2021-02-9 Show GitHub Exploit DB Packet Storm
211564 5.9 MEDIUM
Network 		fedoraproject fedora A flaw was found in the default configuration of dnsmasq, as shipped with Fedora versions prior to 31 and in all versions Red Hat Enterprise Linux, where it listens on any interface and accepts queri… NVD-CWE-Other
CVE-2020-14312 2024-11-21 14:02 2021-02-6 Show GitHub Exploit DB Packet Storm
211565 6.5 MEDIUM
Network 		hcltechsw onetest_performance HCL OneTest Performance V9.5, V10.0, V10.1 contains an inadequate session timeout, which could allow an attacker time to guess and use a valid session ID. CWE-613
 Insufficient Session Expiration 		CVE-2020-14247 2024-11-21 14:02 2021-02-4 Show GitHub Exploit DB Packet Storm
211566 7.5 HIGH
Network 		hcltechsw onetest_performance HCL OneTest Performance V9.5, V10.0, V10.1 uses basic authentication which is relatively weak. An attacker could potentially decode the encoded credentials. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-14246 2024-11-21 14:02 2021-02-4 Show GitHub Exploit DB Packet Storm
211567 9.8 CRITICAL
Network 		hcltechsw onetest_performance HCL OneTest UI V9.5, V10.0, and V10.1 does not perform authentication for functionality that either requires a provable user identity or consumes a significant amount of resources. CWE-306
Missing Authentication for Critical Function 		CVE-2020-14245 2024-11-21 14:02 2021-02-4 Show GitHub Exploit DB Packet Storm
211568 7.5 HIGH
Network 		hcltech digital_experience HCL Digital Experience 9.5 containers include vulnerabilities that could expose sensitive data to unauthorized parties via crafted requests. These affect containers only. These do not affect traditio… NVD-CWE-noinfo
CVE-2020-14255 2024-11-21 14:02 2021-02-3 Show GitHub Exploit DB Packet Storm
211569 4.9 MEDIUM
Network 		hcltech digital_experience HCL Digital Experience 8.5, 9.0, and 9.5 exposes information about the server to unauthorized users. NVD-CWE-noinfo
CVE-2020-14221 2024-11-21 14:02 2021-02-3 Show GitHub Exploit DB Packet Storm
211570 4.3 MEDIUM
Network 		atlassian crucible
fisheye 		Affected versions of Atlassian Fisheye and Crucible allow remote attackers to view a product's SEN via an Information Disclosure vulnerability in the x-asen response header from Atlassian Analytics. … CWE-200
Information Exposure 		CVE-2020-14192 2024-11-21 14:02 2021-02-2 Show GitHub Exploit DB Packet Storm