Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
256381 9.3 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox における XUL ツリー要素に関する任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3077 2010-04-1 13:41 2009-09-9 Show GitHub Exploit DB Packet Storm
256382 5 警告 Mozilla Foundation
レッドハット
- Mozilla Firefox におけるドメイン名の処理に関するサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2009-2470 2010-04-1 13:40 2009-07-21 Show GitHub Exploit DB Packet Storm
256383 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/Thunderbird の JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2009-2466 2010-04-1 13:38 2009-07-21 Show GitHub Exploit DB Packet Storm
256384 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-2463 2010-04-1 13:36 2009-07-21 Show GitHub Exploit DB Packet Storm
256385 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット
- Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2009-2462 2010-04-1 13:34 2009-07-21 Show GitHub Exploit DB Packet Storm
256386 7.2 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の fasync_helper 関数における権限昇格の脆弱性 CWE-399
リソース管理の問題
CVE-2009-4141 2010-03-29 15:18 2010-01-19 Show GitHub Exploit DB Packet Storm
256387 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-0045 2010-03-25 11:49 2010-03-15 Show GitHub Exploit DB Packet Storm
256388 4.3 警告 アップル - Apple Safari の PubSub における Cookie が設定される脆弱性 CWE-16
環境設定
CVE-2010-0044 2010-03-25 11:49 2010-03-15 Show GitHub Exploit DB Packet Storm
256389 7.5 危険 サン・マイクロシステムズ
GNU Project
サイバートラスト株式会社
レッドハット
- GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-4476 2010-03-25 11:47 2007-08-17 Show GitHub Exploit DB Packet Storm
256390 7.8 危険 VMware - VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-3282 2010-03-24 12:23 2009-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197851 8.0 HIGH
Adjacent
huawei smartax_ma5600t_firmware
smartax_ma5800_firmware
smartax_ea5800_firmware
There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product… CWE-120
Classic Buffer Overflow
CVE-2020-9067 2024-11-21 14:39 2020-04-3 Show GitHub Exploit DB Packet Storm
197852 7.8 HIGH
Local
linux
fedoraproject
canonical
netapp
linux_kernel
fedora
ubuntu_linux
cloud_backup
steelstore_cloud_integrated_storage
solidfire
hci_management_node
a700s_firmware
8300_firmware
8700_firmware
a400_firmware<…
In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel … CWE-125
CWE-787
Out-of-bounds Read
 Out-of-bounds Write
CVE-2020-8835 2024-11-21 14:39 2020-04-3 Show GitHub Exploit DB Packet Storm
197853 6.1 MEDIUM
Network
tiki tikiwiki_cms\/groupware There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows maliciou… CWE-79
Cross-site Scripting
CVE-2020-8966 2024-11-21 14:39 2020-04-2 Show GitHub Exploit DB Packet Storm
197854 5.4 MEDIUM
Network
versiant lynx_customer_service_portal Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stor… CWE-79
Cross-site Scripting
CVE-2020-9055 2024-11-21 14:39 2020-03-31 Show GitHub Exploit DB Packet Storm
197855 4.3 MEDIUM
Network
kubernetes
fedoraproject
kubernetes
fedora
The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests. CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-8552 2024-11-21 14:39 2020-03-28 Show GitHub Exploit DB Packet Storm
197856 6.5 MEDIUM
Adjacent
kubernetes
fedoraproject
kubernetes
fedora
The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-8551 2024-11-21 14:39 2020-03-28 Show GitHub Exploit DB Packet Storm
197857 7.8 HIGH
Local
huawei oxfordp-an10b_firmware Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user perf… CWE-287
Improper Authentication
CVE-2020-9066 2024-11-21 14:39 2020-03-27 Show GitHub Exploit DB Packet Storm
197858 5.5 MEDIUM
Local
huawei taurus-al00b_firmware Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to explo… CWE-416
 Use After Free
CVE-2020-9065 2024-11-21 14:39 2020-03-27 Show GitHub Exploit DB Packet Storm
197859 6.5 MEDIUM
Network
google closure_library A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authori… NVD-CWE-noinfo
CVE-2020-8910 2024-11-21 14:39 2020-03-26 Show GitHub Exploit DB Packet Storm
197860 6.1 MEDIUM
Network
dart dart_software_development_kit An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the sanitization and inject c… CWE-79
Cross-site Scripting
CVE-2020-8923 2024-11-21 14:39 2020-03-26 Show GitHub Exploit DB Packet Storm