Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257151	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3242	2010-10-28 16:33	2010-10-12	Show	GitHub Exploit DB Packet Storm

257152	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3241	2010-10-28 16:33	2010-10-12	Show	GitHub Exploit DB Packet Storm

257153	9.3	危険	マイクロソフト	-	Microsoft Excel における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3239	2010-10-28 16:32	2010-10-12	Show	GitHub Exploit DB Packet Storm

257154	9.3	危険	マイクロソフト	-	Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3237	2010-10-28 16:32	2010-10-12	Show	GitHub Exploit DB Packet Storm

257155	9.3	危険	マイクロソフト	-	Microsoft Excel における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3235	2010-10-27 15:17	2010-10-12	Show	GitHub Exploit DB Packet Storm

257156	9.3	危険	マイクロソフト	-	Microsoft Excel における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3234	2010-10-27 15:17	2010-10-12	Show	GitHub Exploit DB Packet Storm

257157	9.3	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3231	2010-10-27 15:16	2010-10-12	Show	GitHub Exploit DB Packet Storm

257158	9.3	危険	マイクロソフト	-	Microsoft Excel における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3230	2010-10-27 15:16	2010-10-12	Show	GitHub Exploit DB Packet Storm

257159	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3221	2010-10-27 15:16	2010-10-12	Show	GitHub Exploit DB Packet Storm

257160	9.3	危険	マイクロソフト	-	複数の Microsoft 製品におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3214	2010-10-27 15:15	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202891	6.5	MEDIUM Adjacent	kubernetes fedoraproject	kubernetes fedora	The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8551	2024-11-21 14:39	2020-03-28	Show	GitHub Exploit DB Packet Storm

202892	7.8	HIGH Local	huawei	oxfordp-an10b_firmware	Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user perf…	CWE-287 Improper Authentication	CVE-2020-9066	2024-11-21 14:39	2020-03-27	Show	GitHub Exploit DB Packet Storm

202893	5.5	MEDIUM Local	huawei	taurus-al00b_firmware	Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to explo…	CWE-416 Use After Free	CVE-2020-9065	2024-11-21 14:39	2020-03-27	Show	GitHub Exploit DB Packet Storm

202894	6.5	MEDIUM Network	google	closure_library	A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authori…	NVD-CWE-noinfo	CVE-2020-8910	2024-11-21 14:39	2020-03-26	Show	GitHub Exploit DB Packet Storm

202895	6.1	MEDIUM Network	dart	dart_software_development_kit	An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the sanitization and inject c…	CWE-79 Cross-site Scripting	CVE-2020-8923	2024-11-21 14:39	2020-03-26	Show	GitHub Exploit DB Packet Storm

202896	9.8	CRITICAL Network	zend	zendto	lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of r…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-8986	2024-11-21 14:39	2020-03-25	Show	GitHub Exploit DB Packet Storm

202897	8.8	HIGH Network	zend	zendto	ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2020-8985	2024-11-21 14:39	2020-03-25	Show	GitHub Exploit DB Packet Storm

202898	7.5	HIGH Network	zend	zendto	lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta allowed IP address spoofing via the X-Forwarded-For header.	CWE-346 Origin Validation Error	CVE-2020-8984	2024-11-21 14:39	2020-03-25	Show	GitHub Exploit DB Packet Storm

202899	9.8	CRITICAL Network	quest	foglight_evolve	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Authentication is not required to exploit this vulnerability. The specif…	CWE-798 Use of Hard-coded Credentials	CVE-2020-8868	2024-11-21 14:39	2020-03-24	Show	GitHub Exploit DB Packet Storm

202900	6.5	MEDIUM Network	horde debian	groupware horde_form debian_linux	This vulnerability allows remote attackers to create arbitrary files on affected installations of Horde Groupware Webmail Edition 5.2.22. Authentication is required to exploit this vulnerability. The…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-8866	2024-11-21 14:39	2020-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed