Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256391 9.3 危険 VMware - 複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0199 2010-03-24 12:22 2009-09-4 Show GitHub Exploit DB Packet Storm
256392 5 警告 VMware - VMware Studio の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-2968 2010-03-24 12:22 2009-08-31 Show GitHub Exploit DB Packet Storm
256393 4 警告 VMware - 複数の VMware 製品の Descheduled Time Accounting ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1805 2010-03-24 12:22 2009-05-28 Show GitHub Exploit DB Packet Storm
256394 6.8 警告 VMware - 複数の VMware 製品の仮想マシン表示機能における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1244 2010-03-24 12:21 2009-04-10 Show GitHub Exploit DB Packet Storm
256395 7.2 危険 VMware - 複数の VMware 製品の仮想マシン通信インターフェイスにおける権限昇格の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1147 2010-03-24 12:21 2009-04-3 Show GitHub Exploit DB Packet Storm
256396 4.9 警告 VMware - 複数の VMware 製品の ioctl におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-1146 2010-03-23 14:11 2010-04-3 Show GitHub Exploit DB Packet Storm
256397 6.8 警告 VMware - 複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0910 2010-03-23 14:11 2010-04-3 Show GitHub Exploit DB Packet Storm
256398 9.3 危険 VMware - 複数の VMware 製品の VNnc コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0909 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
256399 6.4 警告 VMware - VMware ACE の ACE 共有フォルダ実装における無効にされた共有フォルダを有効にされる脆弱性 CWE-noinfo
情報不足 		CVE-2009-0908 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
256400 2.1 注意 VMware - 複数の VMware 製品の VI Client におけるパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0518 2010-03-23 14:10 2010-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210271 6.4 MEDIUM
Local 		gnu
redhat
canonical
debian
suse
microsoft
opensuse 		grub2
enterprise_linux
ubuntu_linux
debian_linux
suse_linux_enterprise_server
enterprise_linux_atomic_host
openshift_container_platform
windows_server_2012
windows_10
windo… 		GRUB2 contains a race condition in grub_script_function_create() leading to a use-after-free vulnerability which can be triggered by redefining a function whilst the same function is already executin… CWE-362
CWE-416
Race Condition
 Use After Free 		CVE-2020-15706 2024-11-21 14:06 2020-07-30 Show GitHub Exploit DB Packet Storm
210272 6.4 MEDIUM
Local 		gnu
redhat
canonical
debian
suse
opensuse
microsoft 		grub2
enterprise_linux
ubuntu_linux
debian_linux
suse_linux_enterprise_server
enterprise_linux_atomic_host
leap
openshift_container_platform
windows_server_2012
windows_10<… 		GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported direc… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-15705 2024-11-21 14:06 2020-07-30 Show GitHub Exploit DB Packet Storm
210273 6.1 MEDIUM
Network 		kitodo kitodo.presentation The dlf (aka Kitodo.Presentation) extension before 3.1.2 for TYPO3 allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-16095 2024-11-21 14:06 2020-07-30 Show GitHub Exploit DB Packet Storm
210274 7.5 HIGH
Network 		claws-mail
fedoraproject 		claws-mail
fedora 		In imap_scan_tree_recursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree. CWE-674
 Uncontrolled Recursion 		CVE-2020-16094 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210275 7.5 HIGH
Network 		grin grin Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble. CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-15899 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210276 9.8 CRITICAL
Network 		artifex
canonical
opensuse 		ghostscript
ubuntu_linux
leap 		A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'po… CWE-787
CWE-191
 Out-of-bounds Write
 Integer Underflow (Wrap or Wraparound) 		CVE-2020-15900 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210277 5.3 MEDIUM
Local 		qemu
debian
canonical 		qemu
debian_linux
ubuntu_linux 		hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest … CWE-787
 Out-of-bounds Write 		CVE-2020-15863 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210278 9.9 CRITICAL
Network 		rconfig rconfig rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability usin… NVD-CWE-noinfo
CVE-2020-15715 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210279 8.8 HIGH
Network 		rconfig rconfig rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter, which could allow t… CWE-89
SQL Injection 		CVE-2020-15714 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210280 8.8 HIGH
Network 		rconfig rconfig rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to… CWE-89
SQL Injection 		CVE-2020-15713 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm