Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256451 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0162 2010-03-9 11:02 2010-02-17 Show GitHub Exploit DB Packet Storm
256452 5 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3988 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
256453 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/SeaMonkey の Web ワーカー機能における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0160 2010-03-9 11:01 2010-02-17 Show GitHub Exploit DB Packet Storm
256454 2.1 注意 サイバートラスト株式会社
GNOME Project
レッドハット		 - NetworkManager の nm-connection-editor における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4145 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
256455 6.8 警告 サイバートラスト株式会社
GNOME Project
レッドハット		 - NetworkManager における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2009-4144 2010-03-8 12:28 2009-12-23 Show GitHub Exploit DB Packet Storm
256456 5 警告 Squid-cache.org - Squid の htcpHandleTstRequest 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0639 2010-03-8 12:28 2010-02-12 Show GitHub Exploit DB Packet Storm
256457 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3302 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
256458 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3301 2010-03-5 10:33 2010-02-12 Show GitHub Exploit DB Packet Storm
256459 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2950 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
256460 9.3 危険 OpenOffice.org Project
レッドハット		 - OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2949 2010-03-5 10:32 2010-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197701 8.8 HIGH
Network 		metagauss registrationmagic In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_r… CWE-862
 Missing Authorization 		CVE-2020-9456 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197702 4.3 MEDIUM
Network 		metagauss registrationmagic The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php se… CWE-862
 Missing Authorization 		CVE-2020-9455 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197703 8.8 HIGH
Network 		metagauss registrationmagic A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, i… CWE-352
 Origin Validation Error 		CVE-2020-9454 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197704 6.5 MEDIUM
Network 		mi miui_firmware An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induc… CWE-94
Code Injection 		CVE-2020-9530 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197705 7.3 HIGH
Adjacent 		mi miui_firmware An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and executed. After reading the resource files… NVD-CWE-noinfo
CVE-2020-9531 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
197706 7.8 HIGH
Local 		redsoftware pdfescape An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking. CWE-426
 Untrusted Search Path 		CVE-2020-9418 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm
197707 7.5 HIGH
Network 		d-link dsl-2640b_firmware An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any attacker that can access the… CWE-306
Missing Authentication for Critical Function 		CVE-2020-9544 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm
197708 8.8 HIGH
Network 		djangoproject
debian
fedoraproject
netapp
canonical 		django
debian_linux
fedora
steelstore_cloud_integrated_storage
ubuntu_linux 		Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a sui… CWE-89
SQL Injection 		CVE-2020-9402 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm
197709 9.8 CRITICAL
Network 		whmcssmarters web_tv_player IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-9380 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm
197710 9.1 CRITICAL
Network 		humaxdigital hga12r-02_firmware HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking. CWE-384
 Session Fixation 		CVE-2020-9370 2024-11-21 14:40 2020-03-5 Show GitHub Exploit DB Packet Storm