Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256041 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliance におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0565 2010-03-10 11:23 2010-02-17 Show GitHub Exploit DB Packet Storm
256042 7.8 危険 シスコシステムズ - Cisco Firewall Services Module におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0151 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
256043 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0569 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
256044 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0150 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
256045 7.8 危険 シスコシステムズ - 複数の Cisco 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0149 2010-03-10 11:22 2010-02-17 Show GitHub Exploit DB Packet Storm
256046 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0162 2010-03-9 11:02 2010-02-17 Show GitHub Exploit DB Packet Storm
256047 5 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3988 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
256048 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0160 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
256049 2.1 注意 サイバートラスト株式会社
GNOME Project
レッドハット		 - NetworkManager の nm-connection-editor における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4145 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
256050 6.8 警告 サイバートラスト株式会社
GNOME Project
レッドハット		 - NetworkManager における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2009-4144 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197951 6.5 MEDIUM
Network 		biscom secure_file_transfer Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-uploa… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-8503 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
197952 4.3 MEDIUM
Network 		zohocorp manageengine_remote_access_plus An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined c… NVD-CWE-noinfo
CVE-2020-8422 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
197953 9.8 CRITICAL
Network 		simplejobscript simplejobscript controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-8440 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197954 9.8 CRITICAL
Network 		hashicorp nomad HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3. CWE-295
Improper Certificate Validation  		CVE-2020-7956 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197955 5.3 MEDIUM
Network 		hashicorp consul HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3. CWE-863
 Incorrect Authorization 		CVE-2020-7955 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197956 7.5 HIGH
Network 		jetbrains intellij_idea In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3. NVD-CWE-noinfo
CVE-2020-7914 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197957 5.4 MEDIUM
Network 		gistpress_project gistpress XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor … CWE-79
Cross-site Scripting 		CVE-2020-8498 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197958 4.8 MEDIUM
Network 		kronos web_time_and_attendance In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input field of the /ApplicationBanner page as … CWE-79
Cross-site Scripting 		CVE-2020-8496 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197959 7.5 HIGH
Network 		kronos web_time_and_attendance In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unaut… CWE-862
 Missing Authorization 		CVE-2020-8495 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197960 8.8 HIGH
Network 		kronos web_time_and_attendance In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H402editUser servlet allows an attacker with Timekeeper, Master Timekeeper, or HR Admin privil… NVD-CWE-noinfo
CVE-2020-8494 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm