Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256031 5 警告 サイバートラスト株式会社
OpenSSL Project
IBM
レッドハット
- OpenSSL の dtls1_buffer_record 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2009-1377 2010-03-12 14:43 2009-05-19 Show GitHub Exploit DB Packet Storm
256032 5 警告 アップル
サイバートラスト株式会社
OpenSSL Project
Apache Software Foundation
レッドハット
- OpenSSL の zlib_stateful_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2008-1678 2010-03-12 14:43 2008-07-10 Show GitHub Exploit DB Packet Storm
256033 5.8 警告 OpenPNEプロジェクト - OpenPNE におけるアクセス制限回避の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-1040 2010-03-11 12:39 2010-03-5 Show GitHub Exploit DB Packet Storm
256034 10 危険 アドビシステムズ - Adobe Download Manager における任意のプログラムをダウンロードおよびインストールされる脆弱性 CWE-noinfo
情報不足
CVE-2010-0189 2010-03-11 12:07 2010-02-23 Show GitHub Exploit DB Packet Storm
256035 7.2 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の collect_rx_frame 関数における脆弱性 CWE-119
バッファエラー
CVE-2009-4005 2010-03-11 12:05 2009-11-20 Show GitHub Exploit DB Packet Storm
256036 7.8 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の RTL8169 NIC ドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2009-1389 2010-03-11 12:04 2009-06-16 Show GitHub Exploit DB Packet Storm
256037 5 警告 サン・マイクロシステムズ
サイバートラスト株式会社
VMware
Net-SNMP
レッドハット
- net-snmp の snmpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2009-1887 2010-03-11 12:03 2009-06-25 Show GitHub Exploit DB Packet Storm
256038 7.1 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0568 2010-03-10 11:23 2010-02-17 Show GitHub Exploit DB Packet Storm
256039 5 警告 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0567 2010-03-10 11:23 2010-02-17 Show GitHub Exploit DB Packet Storm
256040 7.1 危険 シスコシステムズ - Cisco Adaptive Security Appliance におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-0566 2010-03-10 11:23 2010-02-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197031 8.8 HIGH
Network
tibco spotfire_server
spotfire_analytics_platform_for_aws
The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker … CWE-276
Incorrect Default Permissions 
CVE-2020-9408 2024-11-21 14:40 2020-03-12 Show GitHub Exploit DB Packet Storm
197032 6.1 MEDIUM
Network
ckeditor
webspellchecker
fedoraproject
ckeditor
webspellchecker
fedora
A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML el… CWE-79
Cross-site Scripting
CVE-2020-9440 2024-11-21 14:40 2020-03-11 Show GitHub Exploit DB Packet Storm
197033 5.4 MEDIUM
Network
microfocus service_manager There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of ma… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2020-9517 2024-11-21 14:40 2020-03-10 Show GitHub Exploit DB Packet Storm
197034 4.3 MEDIUM
Network
mahara mahara In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, file metadata information is disclosed to group members in the Elasticsearch result list despite them not having access… CWE-200
Information Exposure
CVE-2020-9386 2024-11-21 14:40 2020-03-10 Show GitHub Exploit DB Packet Storm
197035 6.5 MEDIUM
Network
mahara mahara In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing port… CWE-200
Information Exposure
CVE-2020-9282 2024-11-21 14:40 2020-03-9 Show GitHub Exploit DB Packet Storm
197036 7.8 HIGH
Local
wftpserver wing_ftp_server An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session cookies, a local user may view the contents of the session and session_admin d… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-9470 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197037 6.1 MEDIUM
Network
ckeditor
fedoraproject
drupal
oracle
ckeditor
fedora
drupal
peoplesoft_enterprise_peopletools
webcenter_portal
agile_plm
application_express
jd_edwards_enterpriseone_tools
siebel_apps_-_customer_order_management<…
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with t… CWE-79
Cross-site Scripting
CVE-2020-9281 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197038 8.8 HIGH
Network
metagauss registrationmagic In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privileges) to export submitted form data and settings via class_rm_… CWE-862
 Missing Authorization
CVE-2020-9458 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197039 8.8 HIGH
Network
metagauss registrationmagic The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_set… CWE-862
 Missing Authorization
CVE-2020-9457 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197040 8.8 HIGH
Network
metagauss registrationmagic In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_r… CWE-862
 Missing Authorization
CVE-2020-9456 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm