Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257661 7.1 危険 Linux
レッドハット
- Linux kernel の icmp_send 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2009-0778 2010-02-25 12:33 2009-03-12 Show GitHub Exploit DB Packet Storm
257662 7.2 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux Kernel の audit_syscall_entry 関数におけるシステムコール監査設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-0834 2010-02-25 12:33 2009-03-6 Show GitHub Exploit DB Packet Storm
257663 7.2 危険 サイバートラスト株式会社
Linux
レッドハット
- Linux kernel の hrtimer_start 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2007-5966 2010-02-25 12:31 2007-12-20 Show GitHub Exploit DB Packet Storm
257664 4.3 警告 シスコシステムズ - Cisco Secure Desktop の +CSCOT+/translation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0440 2010-02-24 12:27 2010-02-1 Show GitHub Exploit DB Packet Storm
257665 6.2 警告 ヒューレット・パッカード - HP ECMT におけるデータベースにアクセスされる脆弱性 CWE-noinfo
情報不足
CVE-2009-4184 2010-02-24 12:27 2009-10-5 Show GitHub Exploit DB Packet Storm
257666 4.6 警告 アップル - Apple iPhone OS のリカバリモードにおける任意のデータを読まれる脆弱性 CWE-399
リソース管理の問題
CVE-2010-0038 2010-02-24 12:26 2010-02-2 Show GitHub Exploit DB Packet Storm
257667 5 警告 サン・マイクロシステムズ
VMware
- Sun Java SE におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2009-3885 2010-02-24 12:26 2009-11-9 Show GitHub Exploit DB Packet Storm
257668 7.5 危険 サン・マイクロシステムズ
VMware
- JDK および JRE の Java Update 機能における古いバージョンの脆弱性を利用される脆弱性 CWE-Other
その他
CVE-2009-3864 2010-02-24 12:26 2009-11-3 Show GitHub Exploit DB Packet Storm
257669 5 警告 アドビシステムズ - Adobe ColdFusion のデフォルト設定におけるコレクションのメタデータを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0185 2010-02-24 12:25 2010-01-29 Show GitHub Exploit DB Packet Storm
257670 6.8 警告 Apache Software Foundation - Apache HTTP Server の ap_proxy_send_fb 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-0010 2010-02-24 12:25 2010-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210321 7.5 HIGH
Network
webtareas_project webtareas webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-25733 2024-11-21 14:18 2020-09-18 Show GitHub Exploit DB Packet Storm
210322 6.1 MEDIUM
Network
zoneminder zoneminder ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php. CWE-79
Cross-site Scripting
CVE-2020-25729 2024-11-21 14:18 2020-09-18 Show GitHub Exploit DB Packet Storm
210323 9.8 CRITICAL
Network
sqreen python_mini_racer A heap overflow in Sqreen PyMiniRacer (aka Python Mini Racer) before 0.3.0 allows remote attackers to potentially exploit heap corruption. CWE-787
 Out-of-bounds Write
CVE-2020-25489 2024-11-21 14:18 2020-09-18 Show GitHub Exploit DB Packet Storm
210324 8.8 HIGH
Network
alfresco reset_password The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change any user's account password include the admin account. CWE-640
 Weak Password Recovery Mechanism for Forgotten Password
CVE-2020-25728 2024-11-21 14:18 2020-09-18 Show GitHub Exploit DB Packet Storm
210325 7.5 HIGH
Network
flexsolution reset_password The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input field. CWE-89
SQL Injection
CVE-2020-25727 2024-11-21 14:18 2020-09-18 Show GitHub Exploit DB Packet Storm
210326 7.3 HIGH
Network
sqreen php_microagent Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-25490 2024-11-21 14:18 2020-09-18 Show GitHub Exploit DB Packet Storm
210327 9.8 CRITICAL
Network
xmlquery_project xmlquery xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service (SIGSEGV) at xmlquery.(*Node).InnerText or possibly have u… CWE-119
CWE-20
Incorrect Access of Indexable Resource ('Range Error') 
 Improper Input Validation 
CVE-2020-25614 2024-11-21 14:18 2020-09-17 Show GitHub Exploit DB Packet Storm
210328 7.8 HIGH
Local
gnuplot_project gnuplot gnuplot 5.5 is affected by double free when executing print_set_output. This may result in context-dependent arbitrary code execution. CWE-415
 Double Free
CVE-2020-25559 2024-11-21 14:18 2020-09-16 Show GitHub Exploit DB Packet Storm
210329 9.8 CRITICAL
Network
rand_project rand An issue was discovered in the rand_core crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints. CWE-704
 Incorrect Type Conversion or Cast
CVE-2020-25576 2024-11-21 14:18 2020-09-15 Show GitHub Exploit DB Packet Storm
210330 9.8 CRITICAL
Network
failure_project failure An issue was discovered in the failure crate through 0.1.5 for Rust. It may introduce "compatibility hazards" in some applications, and has a type confusion flaw when downcasting. NOTE: This vulnerab… CWE-843
Type Confusion
CVE-2020-25575 2024-11-21 14:18 2020-09-15 Show GitHub Exploit DB Packet Storm