Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
257671 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-94
コード・インジェクション 		CVE-2009-3673 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
257672 9.3 危険 マイクロソフト - Microsoft Internet Explorer におけるメモリ破損の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3671 2010-01-22 10:26 2009-12-8 Show GitHub Exploit DB Packet Storm
257673 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおけるネットワークリソースにアクセスされる脆弱性 CWE-255
CWE-94
CVE-2009-3677 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
257674 10 危険 マイクロソフト - Microsoft Windows のインターネット認証サービスにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2505 2010-01-22 10:24 2009-12-8 Show GitHub Exploit DB Packet Storm
257675 6.9 警告 acpid - acpid の umask におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4235 2010-01-21 11:44 2009-12-7 Show GitHub Exploit DB Packet Storm
257676 6.9 警告 サイバートラスト株式会社
レッドハット
acpid		 - acpid のレッドハットパッチにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4033 2010-01-21 11:43 2009-12-7 Show GitHub Exploit DB Packet Storm
257677 10 危険 アドビシステムズ - Adobe Illustrator における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-3952 2010-01-21 11:43 2010-01-7 Show GitHub Exploit DB Packet Storm
257678 9.3 危険 アドビシステムズ - Adobe Illustrator における Encapsulated PostScript ファイルの処理に関する任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-4195 2010-01-21 11:43 2009-12-4 Show GitHub Exploit DB Packet Storm
257679 4.4 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel の exit_notify 関数における任意のシグナルをプロセスに送信可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1337 2010-01-21 11:23 2009-04-22 Show GitHub Exploit DB Packet Storm
257680 4.9 警告 サイバートラスト株式会社
Linux
レッドハット		 - Linux Kernel における sendmsg 関数の呼び出しに関するサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5300 2010-01-21 11:22 2008-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201681 9.8 CRITICAL
Network 		jsreport jsreport An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8128 2024-11-21 14:38 2020-02-15 Show GitHub Exploit DB Packet Storm
201682 5.3 MEDIUM
Network 		dovecot
fedoraproject 		dovecot
fedora 		The IMAP and LMTP components in Dovecot 2.3.9 before 2.3.9.3 mishandle snippet generation when many characters must be read to compute the snippet and a trailing > character exists. This causes a den… CWE-20
 Improper Input Validation  		CVE-2020-7957 2024-11-21 14:38 2020-02-13 Show GitHub Exploit DB Packet Storm
201683 8.8 HIGH
Network 		kinetica kinetica The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs. This lack of sanitisation could be exploited to allow an authenticated atta… CWE-78
OS Command  		CVE-2020-8429 2024-11-21 14:38 2020-02-12 Show GitHub Exploit DB Packet Storm
201684 5.4 MEDIUM
Network 		piwigo piwigo Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the group_list page. CWE-79
Cross-site Scripting 		CVE-2020-8089 2024-11-21 14:38 2020-02-11 Show GitHub Exploit DB Packet Storm
201685 7.8 HIGH
Local 		ui edgeswitch A privilege escalation in the EdgeSwitch prior to version 1.7.1, an CGI script don't fully sanitize the user input resulting in local commands execution, allowing an operator user (Privilege-1) to es… CWE-78
OS Command  		CVE-2020-8126 2024-11-21 14:38 2020-02-8 Show GitHub Exploit DB Packet Storm
201686 7.8 HIGH
Local 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2. Starting from the apache user account, it is possible to perform privilege escalation through the lack of correct configuration in the server's sudo… CWE-306
Missing Authentication for Critical Function 		CVE-2020-7954 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
201687 7.5 HIGH
Network 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2. Without authentication, it is possible to read server files (e.g., /etc/passwd) due to the use of the nmap -iL (aka input file) option. CWE-306
Missing Authentication for Critical Function 		CVE-2020-7953 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
201688 7.5 HIGH
Network 		percona monitoring_and_management pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-7920 2024-11-21 14:38 2020-02-7 Show GitHub Exploit DB Packet Storm
201689 7.5 HIGH
Network 		rogersmedia citytv_video The Citytv Video application 4.08.0 for Android and 3.35 for iOS sends Unencrypted Analytics. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-8507 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm
201690 5.3 MEDIUM
Network 		corusent global_tv The Global TV application 2.3.2 for Android and 4.7.5 for iOS sends Unencrypted Analytics. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-8506 2024-11-21 14:38 2020-02-6 Show GitHub Exploit DB Packet Storm