Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256111	5	警告	The PHP Group	-	PHP における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2190	2010-08-17 17:36	2010-05-30	Show	GitHub Exploit DB Packet Storm

256112	6.4	警告	The PHP Group	-	PHP における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2010-2191	2010-08-17 17:35	2010-05-31	Show	GitHub Exploit DB Packet Storm

256113	5	警告	The PHP Group	-	PHP の Zend Engine における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1914	2010-08-17 17:34	2010-05-8	Show	GitHub Exploit DB Packet Storm

256114	6.4	警告	The PHP Group	-	PHP の sysvshm 拡張における任意のメモリアドレスを書かれる脆弱性	CWE-399 リソース管理の問題	CVE-2010-1861	2010-08-17 17:33	2010-05-5	Show	GitHub Exploit DB Packet Storm

256115	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0654	2010-08-16 18:57	2010-02-18	Show	GitHub Exploit DB Packet Storm

256116	7.6	危険	アップル	-	Apple Safari における window オブジェクトの処理に脆弱性	CWE-399 リソース管理の問題	CVE-2010-1939	2010-08-16 15:08	2010-05-12	Show	GitHub Exploit DB Packet Storm

256117	7.6	危険	IBM	-	IBM Lotus Domino Web Access の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0919	2010-08-16 15:05	2010-03-3	Show	GitHub Exploit DB Packet Storm

256118	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品における重要な cross-origin 情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1207	2010-08-13 17:15	2010-07-20	Show	GitHub Exploit DB Packet Storm

256119	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	複数の Mozilla 製品におけるクローム特権で任意の JavaScript コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1215	2010-08-13 17:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

256120	7.8	危険	マイクロソフト	-	Microsoft Windows におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1892	2010-08-13 14:01	2010-08-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198121	6.5	MEDIUM Network	oklok_project	oklok	The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit API requests using authenticated but unauthorized tokens, resulting in IDOR issue…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8791	2024-11-21 14:39	2020-05-4	Show	GitHub Exploit DB Packet Storm

198122	9.8	CRITICAL Network	oklok_project	oklok	The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could…	CWE-307 CWE-521 mproper Restriction of Excessive Authentication Attempts Weak Password Requirements	CVE-2020-8790	2024-11-21 14:39	2020-05-4	Show	GitHub Exploit DB Packet Storm

198123	8.9	HIGH Network	pega	platform	Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.	CWE-79 Cross-site Scripting	CVE-2020-8775	2024-11-21 14:39	2020-04-30	Show	GitHub Exploit DB Packet Storm

198124	8.8	HIGH Network	pega	pega_platform	Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.	CWE-79 Cross-site Scripting	CVE-2020-8774	2024-11-21 14:39	2020-04-30	Show	GitHub Exploit DB Packet Storm

198125	8.9	HIGH Network	pega	platform	The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-8773	2024-11-21 14:39	2020-04-30	Show	GitHub Exploit DB Packet Storm

198126	9.8	CRITICAL Network	huawei	ar3200_firmware	Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to …	CWE-287 Improper Authentication	CVE-2020-9068	2024-11-21 14:39	2020-04-28	Show	GitHub Exploit DB Packet Storm

198127	6.7	MEDIUM Local	huawei	osd_firmware	Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vu…	NVD-CWE-noinfo	CVE-2020-9072	2024-11-21 14:39	2020-04-28	Show	GitHub Exploit DB Packet Storm

198128	5.5	MEDIUM Local	juplink	rx4-1500_firmware	httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network.	CWE-276 Incorrect Default Permissions	CVE-2020-8798	2024-11-21 14:39	2020-04-24	Show	GitHub Exploit DB Packet Storm

198129	6.7	MEDIUM Local	juplink	rx4-1500_firmware	Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled an…	CWE-78 OS Command	CVE-2020-8797	2024-11-21 14:39	2020-04-24	Show	GitHub Exploit DB Packet Storm

198130	4.7	MEDIUM Local	canonical apport_project	ubuntu_linux apport	Time-of-check Time-of-use Race Condition vulnerability on crash report ownership change in Apport allows for a possible privilege escalation opportunity. If fs.protected_symlinks is disabled, this ca…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-8833	2024-11-21 14:39	2020-04-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed