Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256131	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0246	2010-02-22 12:14	2010-01-21	Show	GitHub Exploit DB Packet Storm

256132	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0245	2010-02-22 12:13	2010-01-21	Show	GitHub Exploit DB Packet Storm

256133	4.3	警告	マイクロソフト	-	Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性	CWE-DesignError	CVE-2009-4074	2010-02-22 12:13	2009-11-25	Show	GitHub Exploit DB Packet Storm

256134	6.6	警告	マイクロソフト	-	Microsoft Windows の kernel における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-0232	2010-02-22 12:12	2010-01-20	Show	GitHub Exploit DB Packet Storm

256135	10	危険	Rockwell Automation	-	Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性	CWE-noinfo 情報不足	CVE-2009-3739	2010-02-19 14:22	2010-01-21	Show	GitHub Exploit DB Packet Storm

256136	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer において任意のコードが実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0249	2010-02-19 14:21	2010-01-15	Show	GitHub Exploit DB Packet Storm

256137	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2008-0227	2010-02-19 11:37	2008-01-10	Show	GitHub Exploit DB Packet Storm

256138	7.5	危険	アップル MySQL AB	-	MySQL で使用される yaSSL における複数のバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0226	2010-02-19 11:32	2008-01-10	Show	GitHub Exploit DB Packet Storm

256139	7.5	危険	Linux レッドハット	-	Linux kernel の do_coredump 関数における任意のファイルを改ざんされる脆弱性	-	CVE-2006-6304	2010-02-18 14:28	2006-12-14	Show	GitHub Exploit DB Packet Storm

256140	7.8	危険	Linux レッドハット	-	Linux kernel の net/ipv4/route.c 用の特定のレッドハットパッチにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2009-4272	2010-02-18 14:28	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210321	9.8	CRITICAL Network	we-com	municipality_portal_cms	SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field.	CWE-89 SQL Injection	CVE-2020-15539	2024-11-21 14:05	2020-07-6	Show	GitHub Exploit DB Packet Storm

210322	6.1	MEDIUM Network	we-com	municipality_portal_cms	XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar.	CWE-79 Cross-site Scripting	CVE-2020-15538	2024-11-21 14:05	2020-07-6	Show	GitHub Exploit DB Packet Storm

210323	6.1	MEDIUM Network	vanguard_project	vanguard	An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box.	CWE-79 Cross-site Scripting	CVE-2020-15537	2024-11-21 14:05	2020-07-6	Show	GitHub Exploit DB Packet Storm

210324	6.1	MEDIUM Network	online_hotel_booking_system_project	online_hotel_booking_system	An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields.	CWE-79 Cross-site Scripting	CVE-2020-15536	2024-11-21 14:05	2020-07-6	Show	GitHub Exploit DB Packet Storm

210325	6.1	MEDIUM Network	bestsoftinc	car_rental_system	An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields.	CWE-79 Cross-site Scripting	CVE-2020-15535	2024-11-21 14:05	2020-07-6	Show	GitHub Exploit DB Packet Storm

210326	7.5	HIGH Network	wireshark opensuse debian	wireshark leap debian_linux	In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-15466	2024-11-21 14:05	2020-07-5	Show	GitHub Exploit DB Packet Storm

210327	7.8	HIGH Local	valvesoftware	steam_client	An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAM…	CWE-362 Race Condition	CVE-2020-15530	2024-11-21 14:05	2020-07-5	Show	GitHub Exploit DB Packet Storm

210328	7.8	HIGH Local	gog	galaxy	An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak fil…	CWE-667 CWE-732 Improper Locking Incorrect Permission Assignment for Critical Resource	CVE-2020-15529	2024-11-21 14:05	2020-07-5	Show	GitHub Exploit DB Packet Storm

210329	7.8	HIGH Local	gog	galaxy	An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity che…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-15528	2024-11-21 14:05	2020-07-5	Show	GitHub Exploit DB Packet Storm

210330	7.8	HIGH Local	python netapp	python snapcenter	In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native appl…	CWE-427 CWE-908 Uncontrolled Search Path Element Use of Uninitialized Resource	CVE-2020-15523	2024-11-21 14:05	2020-07-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed