Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 19, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256291 | 6.8 | 警告 | アップル GNU Project サン・マイクロシステムズ サイバートラスト株式会社 レッドハット |
- | GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-4131 | 2010-01-18 12:21 | 2007-08-23 | Show | GitHub Exploit DB Packet Storm |
| 256292 | 4.6 | 警告 | IBM | - | IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4150 | 2010-01-15 14:10 | 2009-12-2 | Show | GitHub Exploit DB Packet Storm |
| 256293 | 2.1 | 注意 | サン・マイクロシステムズ | - | Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2009-4080 | 2010-01-15 14:10 | 2009-11-24 | Show | GitHub Exploit DB Packet Storm |
| 256294 | 5 | 警告 | サン・マイクロシステムズ | - | Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4075 | 2010-01-15 14:09 | 2009-11-23 | Show | GitHub Exploit DB Packet Storm |
| 256295 | 2.6 | 注意 | オラクル | - | Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2010-01-14 15:01 | 2010-01-14 | Show | GitHub Exploit DB Packet Storm |
| 256296 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer に脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3672 | 2010-01-14 12:08 | 2009-11-25 | Show | GitHub Exploit DB Packet Storm |
| 256297 | 9.3 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の java.lang パッケージにおける脆弱性 |
CWE-362
競合状態 |
CVE-2009-2724 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 256298 | 10 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の Provider クラスにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2721 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 256299 | 5 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0348 | 2010-01-12 15:01 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 256300 | 4.3 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0349 | 2010-01-12 15:00 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 19, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 212861 | 8.8 |
HIGH
Network |
opmantek | open-audit | An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload. |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2020-11943 | 2024-11-21 13:58 | 2020-04-30 | Show | GitHub Exploit DB Packet Storm |
| 212862 | 9.8 |
CRITICAL
Network |
opmantek | open-audit | An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections. |
CWE-89
SQL Injection |
CVE-2020-11942 | 2024-11-21 13:58 | 2020-04-30 | Show | GitHub Exploit DB Packet Storm |
| 212863 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3). |
CWE-120
Classic Buffer Overflow |
CVE-2020-11677 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 212864 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3). |
CWE-120
Classic Buffer Overflow |
CVE-2020-11676 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 212865 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3). |
CWE-120
Classic Buffer Overflow |
CVE-2020-11675 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 212866 | 8.8 |
HIGH
Adjacent |
cerner | medico | Cerner medico 26.00 allows variable reuse, possibly causing data corruption. |
NVD-CWE-noinfo
|
CVE-2020-11674 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 212867 | 7.0 |
HIGH
Local |
linux canonical debian fedoraproject netapp |
linux_kernel ubuntu_linux debian_linux fedora cloud_backup element_software steelstore_cloud_integrated_storage solidfire hci_management_node active_iq_unified_manager s… |
In the Linux kernel 4.19 through 5.6.7 on the s390 platform, code execution may occur because of a race condition, as demonstrated by code in enable_sacf_uaccess in arch/s390/lib/uaccess.c that fails… |
CWE-362
Race Condition |
CVE-2020-11884 | 2024-11-21 13:58 | 2020-04-29 | Show | GitHub Exploit DB Packet Storm |
| 212868 | 3.3 |
LOW
Local |
qemu | qemu | An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write op… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11869 | 2024-11-21 13:58 | 2020-04-28 | Show | GitHub Exploit DB Packet Storm |
| 212869 | 8.8 |
HIGH
Network |
opmantek | open-audit | An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery. |
CWE-78
OS Command |
CVE-2020-11941 | 2024-11-21 13:58 | 2020-04-28 | Show | GitHub Exploit DB Packet Storm |
| 212870 | 6.1 |
MEDIUM
Network |
rukovoditel | rukovoditel | In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus, an attacker can inject malicious script to steal all users' valuable data. |
CWE-79
Cross-site Scripting |
CVE-2020-11822 | 2024-11-21 13:58 | 2020-04-28 | Show | GitHub Exploit DB Packet Storm |