Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255971 6.9 警告 GNU Project
日本電気
ターボリナックス
サイバートラスト株式会社
レッドハット		 - GNU Libtool の libltdl における権限昇格の脆弱性 CWE-DesignError
CVE-2009-3736 2010-12-15 15:26 2009-11-16 Show GitHub Exploit DB Packet Storm
255972 6.4 警告 アップル
日本電気
Fetchmail Project		 - fetchmail における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2009-2666 2010-12-15 15:25 2009-08-6 Show GitHub Exploit DB Packet Storm
255973 4.3 警告 アップル - Apple Safari の WebKit におけるロケーションバーの URL を偽装される脆弱性 CWE-Other
その他 		CVE-2010-3810 2010-12-15 14:42 2010-11-22 Show GitHub Exploit DB Packet Storm
255974 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3809 2010-12-15 14:39 2010-11-22 Show GitHub Exploit DB Packet Storm
255975 9.3 危険 アップル - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3808 2010-12-15 14:37 2010-11-22 Show GitHub Exploit DB Packet Storm
255976 9.3 危険 アップル - Apple Safari の WebKit 内にある JavaScript 実装における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3805 2010-12-15 14:32 2010-11-22 Show GitHub Exploit DB Packet Storm
255977 5 警告 アップル - Apple Safari の WebKit 内にある JavaScript 実装におけるユーザを追跡可能な脆弱性 CWE-310
暗号の問題 		CVE-2010-3804 2010-12-15 14:29 2010-11-22 Show GitHub Exploit DB Packet Storm
255978 9.3 危険 アップル - Apple Safari の WebKit における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3803 2010-12-15 14:25 2010-11-22 Show GitHub Exploit DB Packet Storm
255979 2.6 注意 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3348 2010-12-15 14:08 2010-12-15 Show GitHub Exploit DB Packet Storm
255980 2.6 注意 マイクロソフト - Internet Explorer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3342 2010-12-15 14:07 2010-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208131 7.5 HIGH
Network 		controlled-merge_project controlled-merge Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28268 2024-11-21 14:22 2020-11-16 Show GitHub Exploit DB Packet Storm
208132 6.1 MEDIUM
Network 		tranzware_payment_gateway_project tranzware_payment_gateway A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (diff… CWE-79
Cross-site Scripting 		CVE-2020-28415 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
208133 6.1 MEDIUM
Network 		tranzware_payment_gateway_project tranzware_payment_gateway A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (diff… CWE-79
Cross-site Scripting 		CVE-2020-28414 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
208134 9.8 CRITICAL
Network 		deephas_project deephas Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28271 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
208135 9.8 CRITICAL
Network 		mjpclab object-hierarchy-access Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28270 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
208136 9.8 CRITICAL
Network 		exodus field Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-28269 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
208137 5.3 MEDIUM
Network 		lettre lettre The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs. NVD-CWE-noinfo
CVE-2020-28247 2024-11-21 14:22 2020-11-13 Show GitHub Exploit DB Packet Storm
208138 5.4 MEDIUM
Network 		dundas dundas_bi The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur. CWE-79
Cross-site Scripting 		CVE-2020-28409 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
208139 5.4 MEDIUM
Network 		dundas dundas_bi The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. CWE-79
Cross-site Scripting 		CVE-2020-28408 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm
208140 4.4 MEDIUM
Local 		xen
fedoraproject
debian 		xen
fedora
debian_linux 		Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Pl… CWE-862
 Missing Authorization 		CVE-2020-28368 2024-11-21 14:22 2020-11-11 Show GitHub Exploit DB Packet Storm