Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256721 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
256722 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
256723 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
256724 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
256725 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
256726 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
256727 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209761 5.4 MEDIUM
Network 		dedecms dedecms A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter. CWE-79
Cross-site Scripting 		CVE-2020-16632 2024-11-21 14:07 2021-05-15 Show GitHub Exploit DB Packet Storm
209762 8.8 HIGH
Network 		microsoft windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019 		Microsoft Windows Security Feature Bypass Vulnerability NVD-CWE-noinfo
CVE-2020-17162 2024-11-21 14:07 2021-02-26 Show GitHub Exploit DB Packet Storm
209763 7.8 HIGH
Local 		we-con levistudiou Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and… CWE-787
 Out-of-bounds Write 		CVE-2020-16243 2024-11-21 14:07 2021-02-24 Show GitHub Exploit DB Packet Storm
209764 9.8 CRITICAL
Network 		phpok phpok PhpOK 5.4.137 contains a SQL injection vulnerability that can inject an attachment data through SQL, and then call the attachment replacement function through api.php to write a PHP file to the targe… CWE-89
SQL Injection 		CVE-2020-16629 2024-11-21 14:07 2021-02-9 Show GitHub Exploit DB Packet Storm
209765 6.3 MEDIUM
Local 		qemu
debian 		qemu
debian_linux 		A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() r… CWE-787
 Out-of-bounds Write 		CVE-2020-17380 2024-11-21 14:07 2021-01-30 Show GitHub Exploit DB Packet Storm
209766 6.1 MEDIUM
Network 		owncloud owncloud ownCloud (Core) before 10.5 allows XSS in login page 'forgot password.' CWE-79
Cross-site Scripting 		CVE-2020-16255 2024-11-21 14:07 2021-01-16 Show GitHub Exploit DB Packet Storm
209767 9.9 CRITICAL
Network 		usvn usvn USVN (aka User-friendly SVN) before 1.0.9 allows remote code execution via shell metacharacters in the number_start or number_end parameter to LastHundredRequest (aka lasthundredrequestAction) in the… CWE-78
OS Command  		CVE-2020-17363 2024-11-21 14:07 2020-12-31 Show GitHub Exploit DB Packet Storm
209768 8.8 HIGH
Network 		1e client The MSI installer in 1E Client 4.1.0.267 and 5.0.0.745 allows remote authenticated users and local users to gain elevated privileges via the repair option. This applies to installations that have a T… CWE-74
CWE-668
Injection
 Exposure of Resource to Wrong Sphere 		CVE-2020-16268 2024-11-21 14:07 2020-12-30 Show GitHub Exploit DB Packet Storm
209769 9.6 CRITICAL
Network 		notable notable Notable 1.8.4 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferences is true). CWE-79
Cross-site Scripting 		CVE-2020-16608 2024-11-21 14:07 2020-12-11 Show GitHub Exploit DB Packet Storm
209770 7.8 HIGH
Local 		microsoft visual_studio_code Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability NVD-CWE-noinfo
CVE-2020-17159 2024-11-21 14:07 2020-12-10 Show GitHub Exploit DB Packet Storm