Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257421	10	危険	マイクロソフト	-	Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-2523	2010-01-4 15:24	2009-11-10	Show	GitHub Exploit DB Packet Storm

257422	9.3	危険	マイクロソフト	-	Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-2512	2010-01-4 15:23	2009-11-10	Show	GitHub Exploit DB Packet Storm

257423	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2722	2010-01-4 14:56	2009-08-10	Show	GitHub Exploit DB Packet Storm

257424	10	危険	アップル VMware サン・マイクロシステムズ	-	Sun Java SE の Provider クラスにおける詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2009-2723	2010-01-4 14:55	2009-08-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200921	9.8	CRITICAL Network	get-git-data_project	get-git-data	get-git-data through 1.3.1 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the arguments provided to get-git-data.	CWE-78 OS Command	CVE-2020-7619	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

200922	9.8	CRITICAL Network	ini-parser_project	ini-parser	ini-parser through 0.0.2 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of Object.prototype using a '__proto__' payload.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-7617	2024-11-21 14:37	2020-04-3	Show	GitHub Exploit DB Packet Storm

200923	9.8	CRITICAL Network	objectcomputing	micronaut	All versions of io.micronaut:micronaut-http-client before 1.2.11 and all versions from 1.3.0 before 1.3.2 are vulnerable to HTTP Request Header Injection due to not validating request headers passed …	CWE-444 HTTP Request Smuggling	CVE-2020-7611	2024-11-21 14:37	2020-03-31	Show	GitHub Exploit DB Packet Storm

200924	9.8	CRITICAL Network	mongodb	bson	All versions of bson before 1.1.4 are vulnerable to Deserialization of Untrusted Data. The package will ignore an unknown value for an object's _bsotype, leading to cases where an object is serialize…	CWE-502 Deserialization of Untrusted Data	CVE-2020-7610	2024-11-21 14:37	2020-03-31	Show	GitHub Exploit DB Packet Storm

200925	6.5	MEDIUM Adjacent	gradle	plugin_publishing	All versions of com.gradle.plugin-publish before 0.11.0 are vulnerable to Insertion of Sensitive Information into Log File. When a plugin author publishes a Gradle plugin while running Gradle with th…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-7599	2024-11-21 14:37	2020-03-31	Show	GitHub Exploit DB Packet Storm

200926	6.1	MEDIUM Network	schneider-electric	andover_continuum_9680_firmware andover_continuum_5740_firmware andover_continuum_5720_firmware andover_continuum_bcx4040_firmware andover_continuum_bcx9640_firmware andover_continuum_…	A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could cause a Reflective Cross-site Scriptin…	CWE-79 Cross-site Scripting	CVE-2020-7482	2024-11-21 14:37	2020-03-24	Show	GitHub Exploit DB Packet Storm

200927	6.1	MEDIUM Network	schneider-electric	andover_continuum_9680_firmware andover_continuum_5740_firmware andover_continuum_5720_firmware andover_continuum_bcx4040_firmware andover_continuum_bcx9640_firmware andover_continuum_…	A CWE-79:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists Andover Continuum (All versions), which could enable a successful Cross-site Scripti…	CWE-79 Cross-site Scripting	CVE-2020-7481	2024-11-21 14:37	2020-03-24	Show	GitHub Exploit DB Packet Storm

200928	9.8	CRITICAL Network	schneider-electric	andover_continuum_9680_firmware andover_continuum_5740_firmware andover_continuum_5720_firmware andover_continuum_bcx4040_firmware andover_continuum_bcx9640_firmware andover_continuum_…	A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists in Andover Continuum (All versions), which could cause files on the application server filesystem to be viewab…	CWE-94 Code Injection	CVE-2020-7480	2024-11-21 14:37	2020-03-24	Show	GitHub Exploit DB Packet Storm

200929	7.8	HIGH Local	schneider-electric	interactive_graphical_scada_system	A CWE-306: Missing Authentication for Critical Function vulnerability exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a local user to execute processes that ot…	CWE-306 Missing Authentication for Critical Function	CVE-2020-7479	2024-11-21 14:37	2020-03-24	Show	GitHub Exploit DB Packet Storm

200930	7.5	HIGH Network	schneider-electric	interactive_graphical_scada_system	A CWE-22: Improper Limitation of a Pathname to a Restricted Directory exists in IGSS (Versions 14 and prior using the service: IGSSupdate), which could allow a remote unauthenticated attacker to read…	CWE-22 Path Traversal	CVE-2020-7478	2024-11-21 14:37	2020-03-24	Show	GitHub Exploit DB Packet Storm