Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257361	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-4311	2010-01-25 11:52	2009-12-8	Show	GitHub Exploit DB Packet Storm

257362	9.3	危険	マイクロソフト	-	Indeo コーデックに複数の脆弱性	CWE-119 バッファエラー	CVE-2009-4310	2010-01-25 11:52	2009-12-15	Show	GitHub Exploit DB Packet Storm

257363	9.3	危険	マイクロソフト	-	Microsoft Windows の Windows Media Player 用の Intel Indeo41 コーデックにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-4309	2010-01-25 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

257364	9.3	危険	マイクロソフト	-	Microsoft Windows の Indeo コーデックにおけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2009-4210	2010-01-25 11:51	2009-12-8	Show	GitHub Exploit DB Packet Storm

257365	5	警告	アップルサイバートラスト株式会社 IPsec-Tools レッドハット	-	Ipsec-tools の証明書検証および NAT-Traversal におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-1632	2010-01-25 11:48	2009-05-14	Show	GitHub Exploit DB Packet Storm

257366	4	警告	PostgreSQL.org サイバートラスト株式会社ターボリナックスサン・マイクロシステムズレッドハット	-	PostgreSQL のエラーメッセージの変換処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-0922	2010-01-25 11:48	2009-03-17	Show	GitHub Exploit DB Packet Storm

257367	5.7	警告	日本電気インターネットイニシアティブヤマハ古河電気工業	-	IPv6 を実装した複数の製品にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	-	2010-01-25 11:47	2009-10-26	Show	GitHub Exploit DB Packet Storm

257368	9.3	危険	マイクロソフト	-	複数の Microsoft 製品のテキストコンバーターにおける整数オーバーフローの脆弱性	CWE-94 コード・インジェクション	CVE-2009-2506	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

257369	9	危険	マイクロソフト	-	Microsoft Windows の Active Directory フェデレーションサービスにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-2509	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

257370	6.9	警告	マイクロソフト	-	Microsoft Windows の Active Directory フェデレーションサービスのシングルサインオン実装における認証情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2009-2508	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208511	8.1	HIGH Network	redhat	cloudforms	A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted onl…	NVD-CWE-Other	CVE-2020-25716	2024-11-21 14:18	2021-06-8	Show	GitHub Exploit DB Packet Storm

208512	6.1	MEDIUM Network	dogtagpki	dogtagpki	A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get auto…	CWE-79 Cross-site Scripting	CVE-2020-25715	2024-11-21 14:18	2021-05-28	Show	GitHub Exploit DB Packet Storm

208513	7.5	HIGH Network	openldap redhat debian fedoraproject	openldap enterprise_linux jboss_enterprise_web_server jboss_enterprise_application_platform jboss_core_services debian_linux fedora	A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest th…	-	CVE-2020-25710	2024-11-21 14:18	2021-05-28	Show	GitHub Exploit DB Packet Storm

208514	4.3	MEDIUM Network	redhat quarkus	resteasy quarkus	A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerabi…	-	CVE-2020-25724	2024-11-21 14:18	2021-05-27	Show	GitHub Exploit DB Packet Storm

208515	5.4	MEDIUM Network	redhat	3scale_api_management 3scale	A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scal…	CWE-306 Missing Authentication for Critical Function	CVE-2020-25634	2024-11-21 14:18	2021-05-27	Show	GitHub Exploit DB Packet Storm

208516	7.0	HIGH Local	x.org	x_server	A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the ser…	-	CVE-2020-25697	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

208517	7.0	HIGH Local	linux debian netapp	linux_kernel debian_linux cloud_backup solidfire_\&_hci_management_node solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h70…	A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.	CWE-662 Improper Synchronization	CVE-2020-25668	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

208518	7.8	HIGH Local	linux debian netapp	linux_kernel debian_linux cloud_backup solidfire_\&_hci_management_node solidfire_baseboard_management_controller h300s_firmware h500s_firmware h700s_firmware h300e_firmwa…	A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkb…	-	CVE-2020-25669	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

208519	5.5	MEDIUM Local	linux fedoraproject netapp	linux_kernel fedora cloud_backup active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h700s_firmware h3…	A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.	-	CVE-2020-25673	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

208520	7.8	HIGH Local	linux fedoraproject netapp debian	linux_kernel fedora cloud_backup active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h700s_firmware h3…	A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.	-	CVE-2020-25671	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm