Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256561 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/Thunderbird の base64 デコード関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2463 2010-04-1 13:36 2009-07-21 Show GitHub Exploit DB Packet Storm
256562 10 危険 サン・マイクロシステムズ
サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox/Thunderbird のブラウザエンジンにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-2462 2010-04-1 13:34 2009-07-21 Show GitHub Exploit DB Packet Storm
256563 7.2 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の fasync_helper 関数における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4141 2010-03-29 15:18 2010-01-19 Show GitHub Exploit DB Packet Storm
256564 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0045 2010-03-25 11:49 2010-03-15 Show GitHub Exploit DB Packet Storm
256565 4.3 警告 アップル - Apple Safari の PubSub における Cookie が設定される脆弱性 CWE-16
環境設定 		CVE-2010-0044 2010-03-25 11:49 2010-03-15 Show GitHub Exploit DB Packet Storm
256566 7.5 危険 サン・マイクロシステムズ
GNU Project
サイバートラスト株式会社
レッドハット		 - GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-4476 2010-03-25 11:47 2007-08-17 Show GitHub Exploit DB Packet Storm
256567 7.8 危険 VMware - VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-3282 2010-03-24 12:23 2009-10-1 Show GitHub Exploit DB Packet Storm
256568 7.2 危険 VMware - VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3281 2010-03-24 12:22 2009-10-1 Show GitHub Exploit DB Packet Storm
256569 9.3 危険 VMware - 複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2628 2010-03-24 12:22 2009-09-4 Show GitHub Exploit DB Packet Storm
256570 9.3 危険 VMware - 複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0199 2010-03-24 12:22 2009-09-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212301 4.3 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 8.12. A regular expression related to a file path resulted in the Advanced Search feature susceptible to catastrophic ba… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13349 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212302 5.7 MEDIUM
Network 		gitlab gitlab An issue has been discovered in GitLab EE affecting all versions starting from 10.2. Required CODEOWNERS approval could be bypassed by targeting a branch without the CODEOWNERS file. Affected version… NVD-CWE-noinfo
CVE-2020-13348 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212303 6.5 MEDIUM
Network 		gitlab gitlab Insufficient permission checks in scheduled pipeline API in GitLab CE/EE 13.0+ allows an attacker to read variable names and values for scheduled pipelines on projects visible to the attacker. Affect… CWE-276
Incorrect Default Permissions  		CVE-2020-13351 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212304 4.3 MEDIUM
Network 		gitlab gitlab CSRF in runner administration page in all versions of GitLab CE/EE allows an attacker who's able to target GitLab instance administrators to pause/resume runners. Affected versions are >=13.5.0, <13.… CWE-352
 Origin Validation Error 		CVE-2020-13350 2024-11-21 14:01 2020-11-18 Show GitHub Exploit DB Packet Storm
212305 5.5 MEDIUM
Local 		gitlab gitlab A vulnerability in the internal Kubernetes agent api in GitLab CE/EE version 13.3 and above allows unauthorized access to private projects. Affected versions are: >=13.4, <13.4.5,>=13.3, <13.3.9,>=13… NVD-CWE-noinfo
CVE-2020-13358 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
212306 4.3 MEDIUM
Network 		gitlab gitlab A potential DOS vulnerability was discovered in GitLab CE/EE starting with version 12.6. The container registry name check could cause exponential number of backtracks for certain user supplied value… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-13354 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
212307 3.2 LOW
Local 		gitlab gitaly When importing repos via URL, one time use git credentials were persisted beyond the expected time window in Gitaly 1.79.0 or above. CWE-613
 Insufficient Session Expiration 		CVE-2020-13353 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
212308 5.3 MEDIUM
Network 		gitlab gitlab Private group info is leaked leaked in GitLab CE/EE version 10.2 and above, when the project is moved from private to public group. Affected versions are: >=10.2, <13.3.9,>=13.4, <13.4.5,>=13.5, <13.… NVD-CWE-noinfo
CVE-2020-13352 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
212309 5.4 MEDIUM
Network 		ivanti endpoint_manager Ivanti Endpoint Manager through 2020.1.1 allows XSS via /LDMS/frm_splitfrm.aspx, /LDMS/licensecheck.aspx, /LDMS/frm_splitcollapse.aspx, /LDMS/alert_log.aspx, /LDMS/ServerList.aspx, /LDMS/frm_coremain… CWE-79
Cross-site Scripting 		CVE-2020-13773 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm
212310 5.3 MEDIUM
Network 		ivanti endpoint_manager In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating system, local pathnames, and environment variables with no … NVD-CWE-noinfo
CVE-2020-13772 2024-11-21 14:01 2020-11-17 Show GitHub Exploit DB Packet Storm