Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256891	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるエクセルファイルのフォーマットの処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3134	2010-01-5 16:18	2009-11-10	Show	GitHub Exploit DB Packet Storm

256892	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における計算式を含むスプレッドシートの処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3132	2010-01-5 16:18	2009-11-10	Show	GitHub Exploit DB Packet Storm

256893	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるセルに含まれる計算式の処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3131	2010-01-5 16:17	2009-11-10	Show	GitHub Exploit DB Packet Storm

256894	9.3	危険	マイクロソフト	-	Microsoft Office Excel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3128	2010-01-5 16:17	2009-11-10	Show	GitHub Exploit DB Packet Storm

256895	9.3	危険	マイクロソフト	-	Microsoft Office および Open XML File Format Converter における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-3127	2010-01-5 16:16	2009-11-10	Show	GitHub Exploit DB Packet Storm

256896	6.8	警告	アップルサイバートラスト株式会社サン・マイクロシステムズターボリナックスヒューレット・パッカード OpenSSL Project レッドハット	-	OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2007-5135	2010-01-5 13:31	2007-10-12	Show	GitHub Exploit DB Packet Storm

256897	7.8	危険	マイクロソフト	-	Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1928	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

256898	9.3	危険	マイクロソフト	-	Microsoft Windows の kernel における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2514	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

256899	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2513	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

256900	6.8	警告	マイクロソフト	-	Microsoft Windows の kernel における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2009-1127	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199601	7.2	HIGH Network	dlink	dch-m225_firmware	D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name.	CWE-78 OS Command	CVE-2020-6842	2024-11-21 14:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

199602	9.8	CRITICAL Network	dlink	dch-m225_firmware	D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.	CWE-78 OS Command	CVE-2020-6841	2024-11-21 14:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

199603	7.8	HIGH Local	honeywell	inncom_inncontrol_firmware	Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.	CWE-269 Improper Privilege Management	CVE-2020-6968	2024-11-21 14:36	2020-02-21	Show	GitHub Exploit DB Packet Storm

199604	6.8	MEDIUM Physics	ge	vivid_e95_firmware vivid_e90_firmware vivid_s70n_firmware vivid_t8_firmware vivid_t9_firmware vivid_iq_firmware logiq_e10_firmware logiq_e9_firmware logiq_s8_firmware logiq…	A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, res…	CWE-20 NVD-CWE-Other Improper Input Validation	CVE-2020-6977	2024-11-21 14:36	2020-02-21	Show	GitHub Exploit DB Packet Storm

199605	9.8	CRITICAL Network	emerson	openenterprise_scada_server	A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.…	CWE-787 Out-of-bounds Write	CVE-2020-6970	2024-11-21 14:36	2020-02-20	Show	GitHub Exploit DB Packet Storm

199606	6.1	MEDIUM Network	topmanage	olk_webstore	An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack.	CWE-79 Cross-site Scripting	CVE-2020-6845	2024-11-21 14:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

199607	8.8	HIGH Network	topmanage	olk_webstore	In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.	CWE-352 Origin Validation Error	CVE-2020-6844	2024-11-21 14:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

199608	6.1	MEDIUM Network	miniorange	saml_sp_single_sign_on	Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayStat…	CWE-79 Cross-site Scripting	CVE-2020-6850	2024-11-21 14:36	2020-02-18	Show	GitHub Exploit DB Packet Storm

199609	5.5	MEDIUM Local	mcafee	data_exchange_layer	Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via careful…	CWE-428 Unquoted Search Path or Element	CVE-2020-7252	2024-11-21 14:36	2020-02-17	Show	GitHub Exploit DB Packet Storm

199610	5.4	MEDIUM Network	codologic	codoforum	Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is op…	CWE-79 CWE-732 Cross-site Scripting Incorrect Permission Assignment for Critical Resource	CVE-2020-7050	2024-11-21 14:36	2020-02-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed