Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256971 9.3 危険 サン・マイクロシステムズ
アドビシステムズ		 - Adobe Acrobat における任意のコードを実行される脆弱性 CWE-189
数値処理の問題 		CVE-2009-2989 2010-02-9 13:55 2009-10-13 Show GitHub Exploit DB Packet Storm
256972 9.3 危険 サン・マイクロシステムズ
アドビシステムズ		 - Adobe Acrobat の画像デコーダにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2009-2984 2010-02-9 13:54 2009-10-13 Show GitHub Exploit DB Packet Storm
256973 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3797 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
256974 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3796 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
256975 9.3 危険 アップル
アドビシステムズ
サン・マイクロシステムズ
レッドハット		 - Adobe Flash Player および Adobe AIR におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-3794 2010-02-9 12:35 2009-12-8 Show GitHub Exploit DB Packet Storm
256976 10 危険 IBM - IBM Lotus Domino Web Access におけるリンク処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0276 2010-02-8 13:19 2010-01-7 Show GitHub Exploit DB Packet Storm
256977 10 危険 IBM - IBM Lotus Domino Web Access における脆弱性 CWE-noinfo
情報不足 		CVE-2009-4594 2010-02-8 13:19 2009-06-5 Show GitHub Exploit DB Packet Storm
256978 10 危険 IBM - IBM Lotus Domino Web Access の Ultra-light Mode における status-alerts URL の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2010-0275 2010-02-8 13:18 2010-01-7 Show GitHub Exploit DB Packet Storm
256979 10 危険 IBM - IBM Lotus Domino Web Access の Ultra-light Mode における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0274 2010-02-8 13:17 2010-01-7 Show GitHub Exploit DB Packet Storm
256980 3.6 注意 サイバートラスト株式会社
D-Bus
レッドハット		 - D-Bus の _dbus_validate_signature_with_reason 関数におけるシグネチャを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1189 2010-02-5 14:22 2009-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
222271 6.5 MEDIUM
Network 		mongodb mongodb A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries which trigger an invariant in the IndexBoundsBuilder. This issue affects MongoDB Serve… CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2019-20924 2024-11-21 13:39 2020-11-24 Show GitHub Exploit DB Packet Storm
222272 6.5 MEDIUM
Network 		mongodb mongodb A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which throw unhandled Javascript exceptions containing types intended to be scoped to… NVD-CWE-Other
CVE-2019-20923 2024-11-21 13:39 2020-11-24 Show GitHub Exploit DB Packet Storm
222273 9.8 CRITICAL
Network 		influxdata
debian 		influxdb
debian_linux 		InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret). CWE-287
Improper Authentication 		CVE-2019-20933 2024-11-21 13:39 2020-11-19 Show GitHub Exploit DB Packet Storm
222274 5.4 MEDIUM
Network 		atlassian editor-core The hyperlinks functionality in atlaskit/editor-core in before version 113.1.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in link ta… CWE-79
Cross-site Scripting 		CVE-2019-20903 2024-11-21 13:39 2020-10-1 Show GitHub Exploit DB Packet Storm
222275 7.5 HIGH
Network 		atlassian crowd Upgrading Crowd via XML Data Transfer can reactivate a disabled user from OpenLDAP. The affected versions are from before version 3.4.6 and from 3.5.0 before 3.5.1. NVD-CWE-noinfo
CVE-2019-20902 2024-11-21 13:39 2020-10-1 Show GitHub Exploit DB Packet Storm
222276 7.5 HIGH
Network 		handlebarsjs handlebars Handlebars before 4.4.5 allows Regular Expression Denial of Service (ReDoS) because of eager matching. The parser may be forced into an endless loop while processing crafted templates. This may allow… CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-20922 2024-11-21 13:39 2020-10-1 Show GitHub Exploit DB Packet Storm
222277 6.1 MEDIUM
Network 		snapappointments bootstrap-select bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser. CWE-79
Cross-site Scripting 		CVE-2019-20921 2024-11-21 13:39 2020-10-1 Show GitHub Exploit DB Packet Storm
222278 8.1 HIGH
Network 		handlebarsjs handlebars Handlebars before 3.0.8 and 4.x before 4.5.3 is vulnerable to Arbitrary Code Execution. The lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arb… CWE-94
Code Injection 		CVE-2019-20920 2024-11-21 13:39 2020-10-1 Show GitHub Exploit DB Packet Storm
222279 4.7 MEDIUM
Local 		perl
fedoraproject
canonical
debian
opensuse 		dbi
fedora
ubuntu_linux
debian_linux
leap 		An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causi… CWE-476
 NULL Pointer Dereference 		CVE-2019-20919 2024-11-21 13:39 2020-09-18 Show GitHub Exploit DB Packet Storm
222280 6.5 MEDIUM
Network 		inspircd inspircd An issue was discovered in InspIRCd 3 before 3.1.0. The silence module contains a use after free vulnerability. This vulnerability can be used for remote crashing of an InspIRCd server by any user ab… CWE-416
 Use After Free 		CVE-2019-20918 2024-11-21 13:39 2020-09-11 Show GitHub Exploit DB Packet Storm