Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256741	4.3	警告	アップル	-	Apple Safari の PubSub における Cookie が設定される脆弱性	CWE-16 環境設定	CVE-2010-0044	2010-03-25 11:49	2010-03-15	Show	GitHub Exploit DB Packet Storm

256742	7.5	危険	サン・マイクロシステムズ GNU Project サイバートラスト株式会社レッドハット	-	GNU tar の safer_name_suffix 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4476	2010-03-25 11:47	2007-08-17	Show	GitHub Exploit DB Packet Storm

256743	7.8	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3282	2010-03-24 12:23	2009-10-1	Show	GitHub Exploit DB Packet Storm

256744	7.2	危険	VMware	-	VMware Fusion の vmx86 のカーネル拡張における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-3281	2010-03-24 12:22	2009-10-1	Show	GitHub Exploit DB Packet Storm

256745	9.3	危険	VMware	-	複数の VMware 製品の VMnc media コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2628	2010-03-24 12:22	2009-09-4	Show	GitHub Exploit DB Packet Storm

256746	9.3	危険	VMware	-	複数の VMware 製品の VMnc media コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0199	2010-03-24 12:22	2009-09-4	Show	GitHub Exploit DB Packet Storm

256747	5	警告	VMware	-	VMware Studio の Web インターフェースにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-2968	2010-03-24 12:22	2009-08-31	Show	GitHub Exploit DB Packet Storm

256748	4	警告	VMware	-	複数の VMware 製品の Descheduled Time Accounting ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-1805	2010-03-24 12:22	2009-05-28	Show	GitHub Exploit DB Packet Storm

256749	6.8	警告	VMware	-	複数の VMware 製品の仮想マシン表示機能における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2009-1244	2010-03-24 12:21	2009-04-10	Show	GitHub Exploit DB Packet Storm

256750	7.2	危険	VMware	-	複数の VMware 製品の仮想マシン通信インターフェイスにおける権限昇格の脆弱性	CWE-noinfo 情報不足	CVE-2009-1147	2010-03-24 12:21	2009-04-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210551	8.8	HIGH Network	sonatype	nexus_repository_manager_3	Sonatype Nexus Repository Manager OSS/Pro version before 3.25.1 allows Remote Code Execution.	NVD-CWE-noinfo	CVE-2020-15871	2024-11-21 14:06	2020-08-1	Show	GitHub Exploit DB Packet Storm

210552	6.1	MEDIUM Network	sonatype	nexus_repository_manager_3	Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (Issue 2 of 2).	CWE-79 Cross-site Scripting	CVE-2020-15870	2024-11-21 14:06	2020-08-1	Show	GitHub Exploit DB Packet Storm

210553	5.4	MEDIUM Network	sonatype	nexus_repository_manager_3	Sonatype Nexus Repository Manager OSS/Pro versions before 3.25.1 allow XSS (issue 1 of 2).	CWE-79 Cross-site Scripting	CVE-2020-15869	2024-11-21 14:06	2020-08-1	Show	GitHub Exploit DB Packet Storm

210554	7.7	HIGH Network	tgstation13	tgstation-server	In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory t…	CWE-22 Path Traversal	CVE-2020-16136	2024-11-21 14:06	2020-08-1	Show	GitHub Exploit DB Packet Storm

210555	9.8	CRITICAL Network	springblade_project	springblade	The DAO/DTO implementation in SpringBlade through 2.7.1 allows SQL Injection in an ORDER BY clause. This is related to the /api/blade-log/api/list ascs and desc parameters.	CWE-89 SQL Injection	CVE-2020-16165	2024-11-21 14:06	2020-07-31	Show	GitHub Exploit DB Packet Storm

210556	7.4	HIGH Network	ripe	rpki_validator_3	An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. It allows remote attackers to bypass intended access restrictions or to cause a denial of service on dependent rou…	CWE-295 Improper Certificate Validation	CVE-2020-16164	2024-11-21 14:06	2020-07-31	Show	GitHub Exploit DB Packet Storm

210557	9.1	CRITICAL Network	ripe	rpki_validator_3	An issue was discovered in RIPE NCC RPKI Validator 3.x before 3.1-2020.07.06.14.28. RRDP fetches proceed even with a lack of validation of a TLS HTTPS endpoint. This allows remote attackers to bypass…	CWE-295 Improper Certificate Validation	CVE-2020-16163	2024-11-21 14:06	2020-07-31	Show	GitHub Exploit DB Packet Storm

210558	7.5	HIGH Network	ripe	rpki_validator_3	An issue was discovered in RIPE NCC RPKI Validator 3.x through 3.1-2020.07.06.14.28. Missing validation checks on CRL presence or CRL staleness in the X509-based RPKI certificate-tree validation proc…	CWE-295 Improper Certificate Validation	CVE-2020-16162	2024-11-21 14:06	2020-07-31	Show	GitHub Exploit DB Packet Storm

210559	5.4	MEDIUM Network	nagios	log_server	A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods -> Email Users menu.	CWE-79 Cross-site Scripting	CVE-2020-16157	2024-11-21 14:06	2020-07-31	Show	GitHub Exploit DB Packet Storm

210560	3.7	LOW Network	linux opensuse fedoraproject debian canonical netapp oracle	linux_kernel leap fedora debian_linux ubuntu_linux steelstore_cloud_integrated_storage active_iq_unified_manager solidfire hci_management_node cloud_volumes_ontap_mediator<…	The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is relat…	CWE-330 Use of Insufficiently Random Values	CVE-2020-16166	2024-11-21 14:06	2020-07-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed