Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257451	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の filter/ww8/ww8par2.cxx におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2009-3302	2010-03-5 10:33	2010-02-12	Show	GitHub Exploit DB Packet Storm

257452	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の filter/ww8/ww8par2.cxx における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-3301	2010-03-5 10:33	2010-02-12	Show	GitHub Exploit DB Packet Storm

257453	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の GIFLZWDecompressor::GIFLZWDecompressor 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2950	2010-03-5 10:32	2010-02-12	Show	GitHub Exploit DB Packet Storm

257454	9.3	危険	OpenOffice.org Project レッドハット	-	OpenOffice.org の XPMReader::ReadXPM 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2009-2949	2010-03-5 10:32	2010-02-12	Show	GitHub Exploit DB Packet Storm

257455	4.3	警告	アドビシステムズ	-	Adobe BlazeDS における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2009-3960	2010-03-5 10:32	2010-02-11	Show	GitHub Exploit DB Packet Storm

257456	6.8	警告	Linux レッドハット	-	KVM の pit_ioport_read 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2010-0309	2010-03-4 13:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

257457	4.1	警告	Linux レッドハット	-	KVM の x86 エミュレータにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0306	2010-03-4 13:41	2010-02-9	Show	GitHub Exploit DB Packet Storm

257458	5	警告	レッドハットリアルネットワークス	-	RealNetworks HelixPlayer および RealPlayer におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0417	2010-03-4 13:40	2010-02-18	Show	GitHub Exploit DB Packet Storm

257459	7.5	危険	レッドハットリアルネットワークス	-	RealNetworks HelixPlayer および RealPlayer の Unescape 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0416	2010-03-4 13:40	2010-02-18	Show	GitHub Exploit DB Packet Storm

257460	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Paint における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-0028	2010-03-3 11:54	2010-02-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200941	3.5	LOW Adjacent	netapp	clustered_data_ontap	Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the names of other Storage Virtual Machines (SVMs) …	NVD-CWE-noinfo	CVE-2020-8589	2024-11-21 14:39	2021-02-4	Show	GitHub Exploit DB Packet Storm

200942	3.5	LOW Adjacent	netapp	clustered_data_ontap	Clustered Data ONTAP versions prior to 9.3P20 and 9.5P15 are susceptible to a vulnerability which could allow unauthorized tenant users to discover the existence of data on other Storage Virtual Mach…	NVD-CWE-noinfo	CVE-2020-8588	2024-11-21 14:39	2021-02-4	Show	GitHub Exploit DB Packet Storm

200943	7.8	HIGH Local	intel	bios	Out of bound read in BIOS firmware for 8th, 9th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 Series Processors may allow an unauthenticated user to potentially enable elevation of…	CWE-125 Out-of-bounds Read	CVE-2020-8672	2024-11-21 14:39	2021-02-3	Show	GitHub Exploit DB Packet Storm

200944	6.7	MEDIUM Local	intel	m10jnp2sb_firmware	Improper input validation in the firmware for Intel(R) Server Board M10JNP2SB before version 7.210 may allow a privileged user to potentially enable escalation of privilege via local access.	CWE-20 Improper Input Validation	CVE-2020-8734	2024-11-21 14:39	2021-02-3	Show	GitHub Exploit DB Packet Storm

200945	5.5	MEDIUM Local	netapp	oncommand_unified_manager	OnCommand Unified Manager Core Package versions prior to 5.2.5 may disclose sensitive account information to unauthorized users via the use of PuTTY Link (plink).	CWE-59 Link Following	CVE-2020-8585	2024-11-21 14:39	2021-01-29	Show	GitHub Exploit DB Packet Storm

200946	9.1	CRITICAL Network	kubernetes	java	Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a malic…	CWE-22 Path Traversal	CVE-2020-8570	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

200947	6.5	MEDIUM Network	kubernetes	container_storage_interface_snapshotter	Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim a…	CWE-476 NULL Pointer Dereference	CVE-2020-8569	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

200948	6.5	MEDIUM Network	kubernetes	secrets_store_csi_driver	Kubernetes Secrets Store CSI Driver versions v0.0.15 and v0.0.16 allow an attacker who can modify a SecretProviderClassPodStatus/Status resource the ability to write content to the host filesystem an…	CWE-22 Path Traversal	CVE-2020-8568	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

200949	6.5	MEDIUM Network	google hashicorp microsoft	secret_manager_provider_for_secret_store_csi_driver vault_provider_for_secrets_store_csi_driver azure_key_vault_provider_for_secrets_store_csi_driver	Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass …	CWE-22 Path Traversal	CVE-2020-8567	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

200950	5.0	MEDIUM Network	kubernetes oracle	kubernetes communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_service_communication_proxy communications_cloud_native_core_policy	Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke…	NVD-CWE-noinfo	CVE-2020-8554	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed