Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257371	6.8	警告	マイクロソフト	-	Microsoft Windows の LSASS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3675	2010-01-22 10:27	2009-12-8	Show	GitHub Exploit DB Packet Storm

257372	9.3	危険	マイクロソフト	-	Microsoft Project における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2009-0102	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

257373	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3673	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

257374	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるメモリ破損の脆弱性	CWE-399 リソース管理の問題	CVE-2009-3671	2010-01-22 10:26	2009-12-8	Show	GitHub Exploit DB Packet Storm

257375	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性	CWE-255 CWE-94	CVE-2009-3677	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

257376	10	危険	マイクロソフト	-	Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2009-2505	2010-01-22 10:24	2009-12-8	Show	GitHub Exploit DB Packet Storm

257377	6.9	警告	acpid	-	acpid の umask におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4235	2010-01-21 11:44	2009-12-7	Show	GitHub Exploit DB Packet Storm

257378	6.9	警告	サイバートラスト株式会社レッドハット acpid	-	acpid のレッドハットパッチにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4033	2010-01-21 11:43	2009-12-7	Show	GitHub Exploit DB Packet Storm

257379	10	危険	アドビシステムズ	-	Adobe Illustrator における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-3952	2010-01-21 11:43	2010-01-7	Show	GitHub Exploit DB Packet Storm

257380	9.3	危険	アドビシステムズ	-	Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-4195	2010-01-21 11:43	2009-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212741	8.8	HIGH Network	loway	queuemetrics	A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticated users to execute arbitrary SQL commands via the exportId …	CWE-89 SQL Injection	CVE-2020-15947	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212742	8.8	HIGH Network	loway	queuemetrics	A SQL injection vulnerability at a tpf URI in Loway QueueMetrics before 19.10.21 allows remote authenticated attackers to execute arbitrary SQL commands via the TPF_XPAR1 parameter.	CWE-89 SQL Injection	CVE-2020-15925	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212743	8.6	HIGH Local	vng	zalo_desktop	An issue was discovered in Zalo.exe in VNG Zalo Desktop 19.8.1.0. An attacker can run arbitrary commands on a remote Windows machine running the Zalo client by sending the user of the device a crafte…	CWE-74 Injection	CVE-2020-16087	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212744	7.5	HIGH Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager OSS/Pro before 3.26.0 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2020-15868	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212745	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers restart the device remotely through sending specially crafted packets. Note: We cannot prove …	NVD-CWE-noinfo	CVE-2020-16139	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212746	7.5	HIGH Network	cisco	unified_ip_conference_station_7937g_firmware	A denial-of-service issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to remotely disable the device until it is power cycled. Note: We cannot prove this vul…	NVD-CWE-noinfo	CVE-2020-16138	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212747	9.8	CRITICAL Network	cisco	unified_ip_conference_station_7937g_firmware	A privilege escalation issue in Cisco Unified IP Conference Station 7937G 1-4-4-0 through 1-4-5-7 allows attackers to reset the credentials for the SSH administrative console to arbitrary values. Not…	NVD-CWE-noinfo	CVE-2020-16137	2024-11-21 14:06	2020-08-13	Show	GitHub Exploit DB Packet Storm

212748	6.1	MEDIUM Network	roundcube fedoraproject	webmail fedora	Roundcube Webmail before 1.3.15 and 1.4.8 allows stored XSS in HTML messages during message display via a crafted SVG document. This issue has been fixed in 1.4.8 and 1.3.15.	CWE-79 Cross-site Scripting	CVE-2020-16145	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

212749	7.5	HIGH Network	robotemi	temi	Use of Hard-coded Credentials in temi Robox OS prior to 120, temi Android app up to 1.3.7931 allows remote attackers to listen in on any ongoing calls between temi robots and their users if they can …	CWE-798 Use of Hard-coded Credentials	CVE-2020-16170	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm

212750	3.8	LOW Local	qemu debian canonical opensuse	qemu debian_linux ubuntu_linux leap	In QEMU through 5.0.0, an assertion failure can occur in the network packet processing. This issue affects the e1000e and vmxnet3 network devices. A malicious guest user/process could use this flaw t…	CWE-617 Reachable Assertion	CVE-2020-16092	2024-11-21 14:06	2020-08-12	Show	GitHub Exploit DB Packet Storm