Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256611 4.3 警告 VMware - VMware Server の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1193 2010-04-21 17:54 2010-03-29 Show GitHub Exploit DB Packet Storm
256612 7.5 危険 VMware - 複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0686 2010-04-21 17:53 2010-03-29 Show GitHub Exploit DB Packet Storm
256613 4.3 警告 VMware - 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1137 2010-04-21 17:51 2010-03-29 Show GitHub Exploit DB Packet Storm
256614 4.6 警告 GNU Project
サイバートラスト株式会社
レッドハット		 - GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4029 2010-04-21 17:51 2009-12-20 Show GitHub Exploit DB Packet Storm
256615 5 警告 Linux
レッドハット		 - Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0741 2010-04-21 17:48 2010-03-30 Show GitHub Exploit DB Packet Storm
256616 6.9 警告 mielke
レッドハット		 - brltty の libbrlttybba.so における権限昇格の脆弱性 CWE-264
CWE-Other
CVE-2008-3279 2010-04-21 17:47 2010-03-30 Show GitHub Exploit DB Packet Storm
256617 4.3 警告 Mozilla Foundation - Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0181 2010-04-20 16:42 2010-03-30 Show GitHub Exploit DB Packet Storm
256618 5.8 警告 サイボウズ - 複数のサイボウズ製品におけるアクセス制限に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2029 2010-04-20 12:01 2010-04-20 Show GitHub Exploit DB Packet Storm
256619 9.3 危険 マイクロソフト - Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0805 2010-04-19 19:20 2010-03-30 Show GitHub Exploit DB Packet Storm
256620 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0491 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212521 9.8 CRITICAL
Network 		apache solr Apache Solr versions 6.6.0 to 6.6.6, 7.0.0 to 7.7.3 and 8.0.0 to 8.6.2 prevents some features considered dangerous (which could be used for remote code execution) to be configured in a ConfigSet that… CWE-863
 Incorrect Authorization 		CVE-2020-13957 2024-11-21 14:02 2020-10-14 Show GitHub Exploit DB Packet Storm
212522 4.3 MEDIUM
Network 		apache
debian
oracle 		tomcat
debian_linux
instantis_enterprisetrack
sd-wan_edge 		If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation o… NVD-CWE-noinfo
CVE-2020-13943 2024-11-21 14:02 2020-10-12 Show GitHub Exploit DB Packet Storm
212523 5.4 MEDIUM
Network 		atlassian jira
jira_server 		Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected… CWE-79
Cross-site Scripting 		CVE-2020-14184 2024-11-21 14:02 2020-10-12 Show GitHub Exploit DB Packet Storm
212524 5.9 MEDIUM
Network 		apache calcite HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks. Calcite uses internally this method to connec… CWE-295
Improper Certificate Validation  		CVE-2020-13955 2024-11-21 14:02 2020-10-9 Show GitHub Exploit DB Packet Storm
212525 4.3 MEDIUM
Network 		atlassian jira Affected versions of Jira Server & Data Center allow a remote attacker with limited (non-admin) privileges to view a Jira instance's Support Entitlement Number (SEN) via an Information Disclosure vul… CWE-200
Information Exposure 		CVE-2020-14183 2024-11-21 14:02 2020-10-7 Show GitHub Exploit DB Packet Storm
212526 6.1 MEDIUM
Network 		secudos qiata_fta An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when reading transfer comments or the global notice board. CWE-79
Cross-site Scripting 		CVE-2020-14294 2024-11-21 14:02 2020-10-2 Show GitHub Exploit DB Packet Storm
212527 7.5 HIGH
Network 		secudos domos conf_datetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field (obtained from the web interface). CWE-78
OS Command  		CVE-2020-14293 2024-11-21 14:02 2020-10-2 Show GitHub Exploit DB Packet Storm
212528 6.1 MEDIUM
Network 		hcltech digital_experience HCL Digital Experience 8.5, 9.0, 9.5 is susceptible to cross-site scripting (XSS). The vulnerability could be employed in a reflected or non-persistent XSS attack. CWE-79
Cross-site Scripting 		CVE-2020-14223 2024-11-21 14:02 2020-10-2 Show GitHub Exploit DB Packet Storm
212529 5.5 MEDIUM
Local 		apache nifi In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially … CWE-611
XXE 		CVE-2020-13940 2024-11-21 14:02 2020-10-2 Show GitHub Exploit DB Packet Storm
212530 8.1 HIGH
Network 		apache superset In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated… NVD-CWE-noinfo
CVE-2020-13952 2024-11-21 14:02 2020-10-1 Show GitHub Exploit DB Packet Storm