Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256421	6.5	警告	サイバートラスト株式会社 Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0298	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

256422	4.4	警告	サイバートラスト株式会社 Fabrice Bellard レッドハット	-	QEMU の usb_host_handle_control 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0297	2010-03-16 11:13	2010-02-9	Show	GitHub Exploit DB Packet Storm

256423	6.8	警告	サン・マイクロシステムズ freedesktop.org	-	Poppler における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3605	2010-03-15 16:40	2009-11-2	Show	GitHub Exploit DB Packet Storm

256424	4.1	警告	Linux レッドハット	-	Linux kernel の smbfs に関する脆弱性	-	CVE-2006-5871	2010-03-15 16:40	2005-10-5	Show	GitHub Exploit DB Packet Storm

256425	7.8	危険	Linux レッドハット	-	Linux kernel の selinux_parse_skb_ipv6 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2005-4886	2010-03-15 16:40	2005-10-5	Show	GitHub Exploit DB Packet Storm

256426	5	警告	サン・マイクロシステムズ	-	Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2003-1589	2010-03-15 16:39	2003-12-2	Show	GitHub Exploit DB Packet Storm

256427	5	警告	サン・マイクロシステムズ	-	Sun ONE/iPlanet Web Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2003-1590	2010-03-15 16:39	2003-08-13	Show	GitHub Exploit DB Packet Storm

256428	7.1	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の handle_dr 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3722	2010-03-15 15:23	2009-10-30	Show	GitHub Exploit DB Packet Storm

256429	4.3	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Switched Rack PDU におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4406	2010-03-12 15:13	2009-12-23	Show	GitHub Exploit DB Packet Storm

256430	4.3	警告	シュナイダーエレクトリック株式会社 (旧社名株式会社エーピーシー・ジャパン)	-	APC Network Management Card におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1798	2010-03-12 15:13	2009-12-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199061	7.5	HIGH Network	ohler	agoo	agoo prior to 2.14.0 allows request smuggling attacks where agoo is used as a backend and a frontend proxy also being vulnerable. HTTP pipelining issues and request smuggling attacks might be possibl…	CWE-444 HTTP Request Smuggling	CVE-2020-7670	2024-11-21 14:37	2020-06-11	Show	GitHub Exploit DB Packet Storm

199062	6.8	MEDIUM Physics	freebsd netapp	freebsd clustered_data_ontap	In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-7456	2024-11-21 14:37	2020-06-10	Show	GitHub Exploit DB Packet Storm

199063	5.4	MEDIUM Network	angularjs	angular.js	angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping "<option>" elements in "<select>" ones changes par…	CWE-79 Cross-site Scripting	CVE-2020-7676	2024-11-21 14:37	2020-06-8	Show	GitHub Exploit DB Packet Storm

199064	7.5	HIGH Network	url-regex_project	url-regex	all versions of url-regex are vulnerable to Regular Expression Denial of Service. An attacker providing a very long string in String.test can cause a Denial of Service.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-7661	2024-11-21 14:37	2020-06-5	Show	GitHub Exploit DB Packet Storm

199065	7.5	HIGH Network	websocket-extensions_project debian canonical	websocket-extensions debian_linux ubuntu_linux	websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string…	NVD-CWE-Other	CVE-2020-7663	2024-11-21 14:37	2020-06-3	Show	GitHub Exploit DB Packet Storm

199066	7.5	HIGH Network	websocket-extensions_project	websocket-extensions	websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string …	NVD-CWE-Other	CVE-2020-7662	2024-11-21 14:37	2020-06-3	Show	GitHub Exploit DB Packet Storm

199067	8.1	HIGH Network	verizon	serialize-javascript	serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".	CWE-502 Deserialization of Untrusted Data	CVE-2020-7660	2024-11-21 14:37	2020-06-2	Show	GitHub Exploit DB Packet Storm

199068	7.5	HIGH Network	celluloid	reel	reel through 0.6.1 allows Request Smuggling attacks due to incorrect Content-Length and Transfer encoding header parsing. It is possible to conduct HTTP request smuggling attacks by sending the Conte…	CWE-444 HTTP Request Smuggling	CVE-2020-7659	2024-11-21 14:37	2020-06-1	Show	GitHub Exploit DB Packet Storm

199069	7.5	HIGH Network	synk	broker	All versions of snyk-broker before 4.73.1 are vulnerable to Information Exposure. It logs private keys if logging level is set to DEBUG.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-7654	2024-11-21 14:37	2020-05-30	Show	GitHub Exploit DB Packet Storm

199070	6.5	MEDIUM Network	synk	broker	All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access to Snyk's internal network of any files…	CWE-22 Path Traversal	CVE-2020-7650	2024-11-21 14:37	2020-05-30	Show	GitHub Exploit DB Packet Storm