Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256161	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の Excel ファイルにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0821	2010-07-2 16:23	2010-06-8	Show	GitHub Exploit DB Packet Storm

256162	7.2	危険	マイクロソフト	-	複数の Microsoft 製品の Windows OpenType Compact Font Format ドライバにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0819	2010-07-1 16:21	2010-06-8	Show	GitHub Exploit DB Packet Storm

256163	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1255	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

256164	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0485	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

256165	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0484	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

256166	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0817	2010-07-1 16:02	2010-04-29	Show	GitHub Exploit DB Packet Storm

256167	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Data Analyzer ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0252	2010-07-1 16:02	2010-02-9	Show	GitHub Exploit DB Packet Storm

256168	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0255	2010-07-1 16:01	2010-02-3	Show	GitHub Exploit DB Packet Storm

256169	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1262	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

256170	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1259	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197561	7.5	HIGH Network	apache	nifi	In Apache NiFi 1.0.0 to 1.11.4, the NiFi download token (one-time password) mechanism used a fixed cache size and did not authenticate a request to create a download token, only when attempting to us…	CWE-306 Missing Authentication for Critical Function	CVE-2020-9487	2024-11-21 14:40	2020-10-2	Show	GitHub Exploit DB Packet Storm

197562	7.5	HIGH Network	apache	nifi	In Apache NiFi 1.10.0 to 1.11.4, the NiFi stateless execution engine produced log output which included sensitive property values. When a flow was triggered, the flow definition configuration JSON wa…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-9486	2024-11-21 14:40	2020-10-2	Show	GitHub Exploit DB Packet Storm

197563	5.4	MEDIUM Network	tibco	spotfire_server spotfire_desktop spotfire_analytics_platform spotfire_analyst	The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vuln…	CWE-79 Cross-site Scripting	CVE-2020-9416	2024-11-21 14:40	2020-09-16	Show	GitHub Exploit DB Packet Storm

197564	5.5	MEDIUM Local	huawei	bla-a09_firmware bla-tl00b_firmware berkeley-l09_firmware duke-l09_firmware p20_firmware p20_pro_firmware jimmy-al00a_firmware lon-l29d_firmware neo-al00d_firmware stanford…	Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions ea…	CWE-20 Improper Input Validation	CVE-2020-9239	2024-11-21 14:40	2020-09-11	Show	GitHub Exploit DB Packet Storm

197565	6.8	MEDIUM Adjacent	huawei	b2368-22_firmware b2368-57_firmware b2368-66_firmware	B2368-22 V100R001C00;B2368-57 V100R001C00;B2368-66 V100R001C00 have a command injection vulnerability. An attacker with high privileges may exploit this vulnerability through some operations on the L…	CWE-77 Command Injection	CVE-2020-9199	2024-11-21 14:40	2020-09-4	Show	GitHub Exploit DB Packet Storm

197566	5.5	MEDIUM Local	huawei	honor_20_pro_firmware honor_view_20_firmware oxfords-an00a_firmware princeton-al10b_firmware princeton-al10d_firmware princeton-tl10c_firmware tony-al00b_firmware yale-al00a_firm…	Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(…	CWE-20 Improper Input Validation	CVE-2020-9235	2024-11-21 14:40	2020-09-4	Show	GitHub Exploit DB Packet Storm

197567	7.5	HIGH Network	spinnaker	orca	The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spinnaker potentially leading to sensitive …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-9298	2024-11-21 14:40	2020-08-29	Show	GitHub Exploit DB Packet Storm

197568	6.5	MEDIUM Network	huawei	fusioncompute	FusionCompute 8.0.0 has an information leak vulnerability. A module does not launch strict access control and information protection. Attackers with low privilege can get some extra information. This…	NVD-CWE-noinfo	CVE-2020-9246	2024-11-21 14:40	2020-08-21	Show	GitHub Exploit DB Packet Storm

197569	4.3	MEDIUM Adjacent	huawei	p30_firmware	HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),Versions earlier than 10.1.0.126(C10E7R5P1),Versions earlier than 10.1.0.126(C1…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-9104	2024-11-21 14:40	2020-08-21	Show	GitHub Exploit DB Packet Storm

197570	5.5	MEDIUM Local	huawei	p30_pro_firmware	HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. Some functions are lack of verification when they process some messages sent fro…	CWE-125 Out-of-bounds Read	CVE-2020-9096	2024-11-21 14:40	2020-08-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed