Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256061	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Paint における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0028	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256062	7.2	危険	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-Other その他	CVE-2010-0233	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256063	6.3	警告	マイクロソフト	-	Microsoft Windows の KDC におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0035	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256064	7.1	危険	マイクロソフト	-	Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-0021	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256065	10	危険	マイクロソフト	-	Microsoft Windows の SMB 実装におけるアクセス権を取得される脆弱性	CWE-264 CWE-310	CVE-2010-0231	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

256066	7.8	危険	マイクロソフト	-	Microsoft Windows の SMB 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0022	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256067	9	危険	マイクロソフト	-	Microsoft Windows の SMB 実装における任意のコードを実行される脆弱性	CWE-20 CWE-94	CVE-2010-0020	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256068	6.9	警告	マイクロソフト	-	Microsoft Windows の Client/Server Run-time Subsystem における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0023	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256069	4	警告	マイクロソフト	-	Microsoft Windows の Hyper-V サーバ実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0026	2010-03-3 11:53	2010-02-9	Show	GitHub Exploit DB Packet Storm

256070	9.3	危険	日本電気アップル富士通古河電気工業ヒューレット・パッカードインターネットイニシアティブアラクサラネットワークス日立	-	IPv6 NDP 実装における Neighbor Discovery メッセージの送信元検証処理に関する脆弱性	CWE-20 不適切な入力確認	CVE-2008-2476	2010-03-3 11:43	2008-10-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210331	8.8	HIGH Network	veeam	veeam_availability_suite veeam_backup_\&_replication	VeeamFSR.sys in Veeam Availability Suite before 10 and Veeam Backup & Replication before 10 has no device object DACL, which allows unprivileged users to achieve total control over filesystem I/O req…	CWE-862 Missing Authorization	CVE-2020-15518	2024-11-21 14:05	2020-07-3	Show	GitHub Exploit DB Packet Storm

210332	2.3	LOW Local	qemu debian	qemu debian_linux	In QEMU 4.2.0, a MemoryRegionOps object may lack read/write callback methods, leading to a NULL pointer dereference.	CWE-476 NULL Pointer Dereference	CVE-2020-15469	2024-11-21 14:05	2020-07-3	Show	GitHub Exploit DB Packet Storm

210333	7.5	HIGH Network	libraw fedoraproject debian	libraw fedora debian_linux	LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpack_thumb.cpp, postprocessing/mem_image.cpp, and utils/thumb_utils.cpp. For example, malloc(sizeof(libraw_processed…	CWE-20 Improper Input Validation	CVE-2020-15503	2024-11-21 14:05	2020-07-2	Show	GitHub Exploit DB Packet Storm

210334	7.5	HIGH Network	duckduckgo	duckduckgo	The DuckDuckGo application through 5.58.0 for Android, and through 7.47.1.0 for iOS, sends hostnames of visited web sites within HTTPS .ico requests to servers in the duckduckgo.com domain, which mig…	CWE-200 Information Exposure	CVE-2020-15502	2024-11-21 14:05	2020-07-2	Show	GitHub Exploit DB Packet Storm

210335	6.1	MEDIUM Network	tileserver	tileservergl	An issue was discovered in server.js in TileServer GL through 3.0.0. The content of the key GET parameter is reflected unsanitized in an HTTP response for the application's main page, causing reflect…	CWE-79 Cross-site Scripting	CVE-2020-15500	2024-11-21 14:05	2020-07-2	Show	GitHub Exploit DB Packet Storm

210336	9.8	CRITICAL Network	wavlink	wl-wn530hg4_firmware	An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple buffer overflow vulnerabilities exist in CGI scripts, leading to remote code execution with root privileges. (The …	CWE-120 Classic Buffer Overflow	CVE-2020-15490	2024-11-21 14:05	2020-07-2	Show	GitHub Exploit DB Packet Storm

210337	9.8	CRITICAL Network	wavlink	wl-wn530hg4_firmware	An issue was discovered on Wavlink WL-WN530HG4 M30HG4.V5030.191116 devices. Multiple shell metacharacter injection vulnerabilities exist in CGI scripts, leading to remote code execution with root pri…	CWE-78 OS Command	CVE-2020-15489	2024-11-21 14:05	2020-07-2	Show	GitHub Exploit DB Packet Storm

210338	7.5	HIGH Network	journal-theme	journal	The Journal theme before 3.1.0 for OpenCart allows exposure of sensitive data via SQL errors.	CWE-209 Information Exposure Through an Error Message	CVE-2020-15478	2024-11-21 14:05	2020-07-1	Show	GitHub Exploit DB Packet Storm

210339	7.5	HIGH Network	ntop debian	ndpi debian_linux	In nDPI through 3.2, the Oracle protocol dissector has a heap-based buffer over-read in ndpi_search_oracle in lib/protocols/oracle.c.	CWE-125 Out-of-bounds Read	CVE-2020-15476	2024-11-21 14:05	2020-07-1	Show	GitHub Exploit DB Packet Storm

210340	9.8	CRITICAL Network	ntop	ndpi	In nDPI through 3.2, ndpi_reset_packet_line_info in lib/ndpi_main.c omits certain reinitialization, leading to a use-after-free.	CWE-416 Use After Free	CVE-2020-15475	2024-11-21 14:05	2020-07-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed