Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
256921	2.1	注意	サイバートラスト株式会社レッドハット	-	lm_sensors の pwmconfig (スクリプト)における不適切な一時ファイル作成によるシンボリックリンク攻撃を受ける脆弱性	-	CVE-2005-2672	2010-02-17 11:43	2005-08-22	Show	GitHub Exploit DB Packet Storm

256922	9.3	危険	アップル	-	Apple Mac OS X の Image RAW における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0037	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

256923	9.3	危険	アップル	-	Apple Mac OS X の CoreAudio における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0036	2010-02-16 11:45	2010-01-19	Show	GitHub Exploit DB Packet Storm

256924	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2009-4003	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

256925	9.3	危険	アドビシステムズ	-	Adobe Shockwave Player における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4002	2010-02-16 11:44	2010-01-19	Show	GitHub Exploit DB Packet Storm

256926	6.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel における競合状態の脆弱性	CWE-362 競合状態	CVE-2009-3547	2010-02-16 11:44	2009-11-3	Show	GitHub Exploit DB Packet Storm

256927	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の netlink サブシステムにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2005-4881	2010-02-16 11:43	2009-10-19	Show	GitHub Exploit DB Packet Storm

256928	4.7	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の execve 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2009-2848	2010-02-16 11:43	2009-08-18	Show	GitHub Exploit DB Packet Storm

256929	4.9	警告	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の do_sigaltstack 関数における情報漏えいの脆弱性	CWE-noinfo 情報不足	CVE-2009-2847	2010-02-16 11:43	2009-08-18	Show	GitHub Exploit DB Packet Storm

256930	7.2	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の personality サブシステムにおける NULL ポインタ参照の脆弱性	CWE-16 環境設定	CVE-2009-1895	2010-02-16 11:43	2009-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200341	4.7	MEDIUM Network	sap	business_objects_business_intelligence_platform	BI Launchpad and CMC in SAP Business Objects Business Intelligence Platform, versions 4.1, 4.2, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerabil…	CWE-79 Cross-site Scripting	CVE-2020-6220	2024-11-21 14:35	2022-06-7	Show	GitHub Exploit DB Packet Storm

200342	7.8	HIGH Local	graphisoft	bimx_desktop_viewer	An exploitable code execution vulnerability exists in the file format parsing functionality of Graphisoft BIMx Desktop Viewer 2019.2.2328. A specially crafted file can cause a heap buffer overflow re…	CWE-190 Integer Overflow or Wraparound	CVE-2020-6099	2024-11-21 14:35	2022-04-19	Show	GitHub Exploit DB Packet Storm

200343	9.6	CRITICAL Network	google	chrome	Use after free in ANGLE in Google Chrome prior to 83.0.4103.97 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	CWE-416 Use After Free	CVE-2020-6492	2024-11-21 14:35	2021-11-3	Show	GitHub Exploit DB Packet Storm

200344	6.1	MEDIUM Network	zen-cart	zen_cart	Zen Cart 1.5.6d allows reflected XSS via the main_page parameter to includes/templates/template_default/common/tpl_main_page.php or includes/templates/responsive_classic/common/tpl_main_page.php.	CWE-79 Cross-site Scripting	CVE-2020-6578	2024-11-21 14:35	2021-03-19	Show	GitHub Exploit DB Packet Storm

200345	9.8	CRITICAL Network	it-recht-kanzlei	it-recht-kanzlei	The IT-Recht Kanzlei plugin in Zen Cart 1.5.6c (German edition) allows itrk-api.php rechtstext_language SQL Injection.	CWE-89 SQL Injection	CVE-2020-6577	2024-11-21 14:35	2021-03-19	Show	GitHub Exploit DB Packet Storm

200346	7.5	HIGH Network	rockwellautomation	flex_io_1794-aent\/b_firmware	An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause …	CWE-120 Classic Buffer Overflow	CVE-2020-6088	2024-11-21 14:35	2021-02-4	Show	GitHub Exploit DB Packet Storm

200347	7.8	HIGH Local	checkpoint	smartconsole	Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation …	CWE-269 Improper Privilege Management	CVE-2020-6024	2024-11-21 14:35	2021-01-21	Show	GitHub Exploit DB Packet Storm

200348	8.8	HIGH Network	google	chrome	Use after free in Media in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to execute arbitrary code via a crafted HTML page.	CWE-416 Use After Free	CVE-2020-6572	2024-11-21 14:35	2021-01-15	Show	GitHub Exploit DB Packet Storm

200349	6.1	MEDIUM Network	opera	opera	URLs using “javascript:” have the protocol removed when pasted into the address bar to protect users from cross-site scripting (XSS) attacks, but in certain circumstances this removal was not perform…	CWE-79 Cross-site Scripting	CVE-2020-6159	2024-11-21 14:35	2020-12-24	Show	GitHub Exploit DB Packet Storm

200350	7.5	HIGH Network	rockwellautomation	micrologix_1100_b_firmware	An exploitable denial-of-service vulnerability exists in the IPv4 functionality of Allen-Bradley MicroLogix 1100 Programmable Logic Controller Systems Series B FRN 16.000, Series B FRN 15.002, Series…	NVD-CWE-noinfo	CVE-2020-6111	2024-11-21 14:35	2020-12-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed