Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257421 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257422 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257423 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257424 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257425 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
257426 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
257427 10 危険 アップル
VMware
サン・マイクロシステムズ		 - Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足 		CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207871 7.5 HIGH
Network 		os4ed opensis OpenSIS Community Edition through 7.6 is affected by incorrect access controls for the file ResetUserInfo.php that allow an unauthenticated attacker to change the password of arbitrary users. CWE-287
CWE-640
Improper Authentication
 Weak Password Recovery Mechanism for Forgotten Password 		CVE-2020-27408 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
207872 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		In RestoreMSCWarning() of /coders/pdf.c there are several areas where calls to GetPixelIndex() could result in values outside the range of representable for the unsigned char type. The patch casts th… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27771 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
207873 5.5 MEDIUM
Local 		imagemagick
debian 		imagemagick
debian_linux 		Due to a missing check for 0 value of `replace_extent`, it is possible for offset `p` to overflow in SubstituteString(), causing potential impact to application availability. This could be triggered … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27770 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
207874 7.8 HIGH
Local 		imagemagick
debian 		imagemagick
debian_linux 		A flaw was found in ImageMagick in MagickCore/statistic.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the r… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27766 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
207875 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/segment.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero.… CWE-369
 Divide By Zero 		CVE-2020-27765 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
207876 3.3 LOW
Local 		imagemagick
redhat
debian 		imagemagick
enterprise_linux
debian_linux 		A flaw was found in ImageMagick in MagickCore/quantum.h. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of values outside the ran… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27767 2024-11-21 14:21 2020-12-5 Show GitHub Exploit DB Packet Storm
207877 6.8 MEDIUM
Local 		canonical snapcraft
ubuntu_linux 		In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both pl… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-27348 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
207878 6.1 MEDIUM
Network 		lxml
redhat
debian
fedoraproject
netapp
oracle 		lxml
enterprise_linux
software_collections
debian_linux
fedora
snapcenter
communications_offline_mediation_controller
zfs_storage_appliance_kit 		A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A r… - CVE-2020-27783 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
207879 7.5 HIGH
Network 		freedesktop
redhat
debian 		poppler
enterprise_linux
debian_linux 		A flaw was found in Poppler in the way certain PDF files were converted into HTML. A remote attacker could exploit this flaw by providing a malicious PDF file that, when processed by the 'pdftohtml' … CWE-824
 Access of Uninitialized Pointer 		CVE-2020-27778 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm
207880 3.3 LOW
Local 		imagemagick
debian 		imagemagick
debian_linux 		In /MagickCore/statistic.c, there are several areas in ApplyEvaluateOperator() where a size_t cast should have been a ssize_t cast, which causes out-of-range values under some circumstances when a cr… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-27764 2024-11-21 14:21 2020-12-4 Show GitHub Exploit DB Packet Storm