Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256561	7.8	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の CIFS における長大な nativeFileSystem フィールドの処理に関するバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-1439	2010-02-17 11:44	2009-04-27	Show	GitHub Exploit DB Packet Storm

256562	6.8	警告	サイバートラスト株式会社 Mozilla Foundation Pango.org レッドハット	-	Pango の pango_glyph_string_set_size 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-1194	2010-02-17 11:44	2009-05-8	Show	GitHub Exploit DB Packet Storm

256563	9.3	危険	Artifex Software サイバートラスト株式会社 Argyll CMS サン・マイクロシステムズレッドハット	-	Ghostscript の ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-0792	2010-02-17 11:44	2009-04-14	Show	GitHub Exploit DB Packet Storm

256564	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-0584	2010-02-17 11:44	2009-03-23	Show	GitHub Exploit DB Packet Storm

256565	9.3	危険	Artifex Software サイバートラスト株式会社サン・マイクロシステムズレッドハット	-	ICC Format ライブラリにおける整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0583	2010-02-17 11:43	2009-03-23	Show	GitHub Exploit DB Packet Storm

256566	6	警告	Artifex Software サイバートラスト株式会社レッドハット	-	Ghostscript の zseticcspace() 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2008-0411	2010-02-17 11:43	2008-02-27	Show	GitHub Exploit DB Packet Storm

256567	2.1	注意	サイバートラスト株式会社レッドハット	-	lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性	-	CVE-2005-2672	2010-02-17 11:43	2005-08-22	Show	GitHub Exploit DB Packet Storm

256568	9.3	危険	アップル	-	Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0037	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

256569	9.3	危険	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0036	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

256570	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4003	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213831	4.9	MEDIUM Network	misp	misp	app/Model/feed.php in MISP before 2.4.124 allows administrators to choose arbitrary files that should be ingested by MISP. This does not cause a leak of the full contents of a file, but does cause a …	NVD-CWE-noinfo	CVE-2020-11458	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213832	3.3	LOW Local	zoom	meetings	Zoom Client for Meetings through 4.6.8 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera ac…	CWE-345 Insufficient Verification of Data Authenticity	CVE-2020-11470	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213833	7.8	HIGH Local	zoom	meetings	Zoom Client for Meetings through 4.6.8 on macOS copies runwithroot to a user-writable temporary directory during installation, which allows a local process (with the user's privileges) to obtain root…	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-11469	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213834	7.2	HIGH Network	deskpro	deskpro	An issue was discovered in Deskpro before 2019.8.0. This product enables administrators to modify the helpdesk interface by editing /portal/api/style/edit-theme-set/template-sources theme templates, …	CWE-502 Deserialization of Untrusted Data	CVE-2020-11467	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213835	4.3	MEDIUM Network	deskpro	deskpro	An issue was discovered in Deskpro before 2019.8.0. The /api/tickets endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve arbitrary information about all helpdesk…	CWE-269 Improper Privilege Management	CVE-2020-11466	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213836	8.8	HIGH Network	deskpro	deskpro	An issue was discovered in Deskpro before 2019.8.0. The /api/apps/* endpoints failed to properly validate a user's privilege, allowing an attacker to control/install helpdesk applications and leak cu…	CWE-862 Missing Authorization	CVE-2020-11465	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213837	4.3	MEDIUM Network	deskpro	deskpro	An issue was discovered in Deskpro before 2019.8.0. The /api/people endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve sensitive information about all users reg…	CWE-269 Improper Privilege Management	CVE-2020-11464	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213838	7.5	HIGH Network	deskpro	deskpro	An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all help…	CWE-862 Missing Authorization	CVE-2020-11463	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213839	5.4	MEDIUM Network	netgate	pfsense	pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user.	CWE-79 Cross-site Scripting	CVE-2020-11457	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

213840	5.4	MEDIUM Network	limesurvey	limesurvey	LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups).	CWE-79 Cross-site Scripting	CVE-2020-11456	2024-11-21 13:57	2020-04-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed