Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257571	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0485	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

257572	6.8	警告	マイクロソフト	-	Microsoft Windows の win32k.sys における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0484	2010-07-1 16:20	2010-06-8	Show	GitHub Exploit DB Packet Storm

257573	4.3	警告	マイクロソフト	-	Microsoft SharePoint Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0817	2010-07-1 16:02	2010-04-29	Show	GitHub Exploit DB Packet Storm

257574	9.3	危険	マイクロソフト	-	Microsoft Windows の Microsoft Data Analyzer ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0252	2010-07-1 16:02	2010-02-9	Show	GitHub Exploit DB Packet Storm

257575	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0255	2010-07-1 16:01	2010-02-3	Show	GitHub Exploit DB Packet Storm

257576	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1262	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257577	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1259	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257578	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1261	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257579	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1260	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

257580	4.3	警告	マイクロソフト	-	複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1257	2010-06-30 18:53	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210511	7.5	HIGH Network	dovecot debian fedoraproject	dovecot debian_linux fedora	Dovecot before 2.3.13 has Improper Input Validation in lda, lmtp, and imap, leading to an application crash via a crafted email message with certain choices for ten thousand MIME parts.	CWE-20 Improper Input Validation	CVE-2020-25275	2024-11-21 14:17	2021-01-5	Show	GitHub Exploit DB Packet Storm

210512	8.8	HIGH Network	moxa	nport_iaw5000a-i\/o_firmware	The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has incorrectly implemented protections from session fixation, which may allow an attacker to gain access to a sessio…	CWE-384 Session Fixation	CVE-2020-25198	2024-11-21 14:17	2020-12-24	Show	GitHub Exploit DB Packet Storm

210513	9.8	CRITICAL Network	moxa	nport_iaw5000a-i\/o_firmware	The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows SSH/Telnet sessions, which may be vulnerable to brute force attacks to bypass authentication.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-25196	2024-11-21 14:17	2020-12-24	Show	GitHub Exploit DB Packet Storm

210514	8.8	HIGH Network	moxa	nport_iaw5000a-i\/o_firmware	The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administ…	CWE-269 Improper Privilege Management	CVE-2020-25194	2024-11-21 14:17	2020-12-24	Show	GitHub Exploit DB Packet Storm

210515	5.3	MEDIUM Network	moxa	nport_iaw5000a-i\/o_firmware	The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower allows sensitive information to be displayed without proper authorization.	CWE-200 Information Exposure	CVE-2020-25192	2024-11-21 14:17	2020-12-24	Show	GitHub Exploit DB Packet Storm

210516	9.8	CRITICAL Network	moxa	nport_iaw5000a-i\/o_firmware	The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower stores and transmits the credentials of third-party services in cleartext.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-25190	2024-11-21 14:17	2020-12-24	Show	GitHub Exploit DB Packet Storm

210517	7.5	HIGH Network	moxa	nport_iaw5000a-i\/o_firmware	The built-in web service for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower does not require users to have strong passwords.	CWE-521 Weak Password Requirements	CVE-2020-25153	2024-11-21 14:17	2020-12-24	Show	GitHub Exploit DB Packet Storm

210518	9.8	CRITICAL Network	treck	tcp\/ip	A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.	CWE-787 Out-of-bounds Write	CVE-2020-25066	2024-11-21 14:17	2020-12-23	Show	GitHub Exploit DB Packet Storm

210519	7.8	HIGH Local	supremocontrol	supremo	Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan horse with the Supremo.exe filename.	CWE-269 Improper Privilege Management	CVE-2020-25106	2024-11-21 14:17	2020-12-23	Show	GitHub Exploit DB Packet Storm

210520	8.8	HIGH Network	logrhythm	platform_manager	LogRhythm Platform Manager (PM) 7.4.9 has Incorrect Access Control. Users within LogRhythm can be delegated different roles and privileges, intended to limit what data and services they can interact …	NVD-CWE-Other	CVE-2020-25096	2024-11-21 14:17	2020-12-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed