Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257231 5 警告 アップル
サイバートラスト株式会社
VMware
サン・マイクロシステムズ
レッドハット		 - Sun Java SE および OpenJDK の Java Runtime Environment (JRE) における ディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-3728 2010-02-23 11:51 2009-11-9 Show GitHub Exploit DB Packet Storm
257232 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0248 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
257233 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0244 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
257234 9.3 危険 マイクロソフト - Microsoft Internet Explorer の URL 検証における任意のローカルプログラムを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0027 2010-02-22 12:15 2010-01-21 Show GitHub Exploit DB Packet Storm
257235 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0247 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
257236 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0246 2010-02-22 12:14 2010-01-21 Show GitHub Exploit DB Packet Storm
257237 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0245 2010-02-22 12:13 2010-01-21 Show GitHub Exploit DB Packet Storm
257238 4.3 警告 マイクロソフト - Microsoft Internet Explorer の XSS フィルタにおけるクロスサイトスクリプティングの脆弱性 CWE-DesignError
CVE-2009-4074 2010-02-22 12:13 2009-11-25 Show GitHub Exploit DB Packet Storm
257239 6.6 警告 マイクロソフト - Microsoft Windows の kernel における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0232 2010-02-22 12:12 2010-01-20 Show GitHub Exploit DB Packet Storm
257240 10 危険 Rockwell Automation - Rockwell Automation Allen-Bradley MicroLogix PLC に複数の脆弱性 CWE-noinfo
情報不足 		CVE-2009-3739 2010-02-19 14:22 2010-01-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215631 9.8 CRITICAL
Network 		wso2 api_manager WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intranet. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-13226 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
215632 4.8 MEDIUM
Network 		phpipam phpipam phpIPAM 1.4 contains a stored cross site scripting (XSS) vulnerability within the Edit User Instructions field of the User Instructions widget. CWE-79
Cross-site Scripting 		CVE-2020-13225 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
215633 7.5 HIGH
Network 		wireshark
debian
opensuse
fedoraproject 		wireshark
debian_linux
leap
fedora 		In Wireshark 3.2.0 to 3.2.3, 3.0.0 to 3.0.10, and 2.6.0 to 2.6.16, the NFS dissector could crash. This was addressed in epan/dissectors/packet-nfs.c by preventing excessive recursion, such as for a c… CWE-674
 Uncontrolled Recursion 		CVE-2020-13164 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
215634 7.4 HIGH
Network 		em-imap_project em-imap em-imap 0.5 uses the library eventmachine in an insecure way that allows an attacker to perform a man-in-the-middle attack against users of the library. The hostname in a TLS server certificate is no… CWE-295
Improper Certificate Validation  		CVE-2020-13163 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
215635 9.8 CRITICAL
Network 		netsweeper netsweeper Netsweeper through 6.4.3 allows unauthenticated remote code execution because webadmin/tools/unixlogin.php (with certain Referer headers) launches a command line with client-supplied parameters, and … CWE-78
OS Command  		CVE-2020-13167 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
215636 9.8 CRITICAL
Network 		mylittletools mylittleadmin The management tool in MyLittleAdmin 3.8 allows remote attackers to execute arbitrary code because machineKey is hardcoded (the same for all customers' installations) in web.config, and can be used t… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-13166 2024-11-21 14:00 2020-05-20 Show GitHub Exploit DB Packet Storm
215637 7.5 HIGH
Network 		nlnetlabs
debian
opensuse
canonical
fedoraproject 		unbound
debian_linux
leap
ubuntu_linux
fedora 		Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-12663 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
215638 7.5 HIGH
Network 		nlnetlabs
debian
opensuse
canonical
fedoraproject 		unbound
debian_linux
leap
ubuntu_linux
fedora 		Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-12662 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
215639 7.5 HIGH
Network 		nic knot_resolver Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME i… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-12667 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm
215640 6.5 MEDIUM
Network 		zohocorp manageengine_servicedesk_plus Zoho ManageEngine Service Plus before 11.1 build 11112 allows low-privilege authenticated users to discover the File Protection password via a getFileProtectionSettings call to AjaxServlet. CWE-862
 Missing Authorization 		CVE-2020-13154 2024-11-21 14:00 2020-05-19 Show GitHub Exploit DB Packet Storm