Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257681	7.1	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の ext4_fill_flex_info 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2009-4307	2010-05-21 18:22	2009-12-13	Show	GitHub Exploit DB Packet Storm

257682	7.1	危険	サイバートラスト株式会社 Linux レッドハット	-	Linux kernel の mac80211 サブシステムにおけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2009-4027	2010-05-21 18:22	2009-12-2	Show	GitHub Exploit DB Packet Storm

257683	5	警告	レッドハット	-	Linux SCSI target framework および iSCSI Enterprise Target におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2010-0743	2010-05-21 16:13	2010-04-8	Show	GitHub Exploit DB Packet Storm

257684	7.5	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の LWRES 解析部におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0304	2010-05-21 16:13	2010-01-27	Show	GitHub Exploit DB Packet Storm

257685	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の SMB および SMB2 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-4377	2010-05-21 16:13	2009-12-17	Show	GitHub Exploit DB Packet Storm

257686	4.3	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の DCERPC/NT 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-3550	2010-05-21 16:12	2009-10-26	Show	GitHub Exploit DB Packet Storm

257687	7.1	危険	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の Infiniband 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2563	2010-05-20 18:30	2009-07-20	Show	GitHub Exploit DB Packet Storm

257688	5	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の AFS 解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2562	2010-05-20 18:29	2009-07-20	Show	GitHub Exploit DB Packet Storm

257689	5	警告	サイバートラスト株式会社 Wireshark レッドハット	-	Wireshark の解析部におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2009-2560	2010-05-20 18:29	2009-07-20	Show	GitHub Exploit DB Packet Storm

257690	10	危険	サン・マイクロシステムズサイバートラスト株式会社 RealVNC レッドハット	-	RealVNC VNC Viewer コンポーネントにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-4770	2010-05-20 18:03	2009-01-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
218041	9.3	CRITICAL Network	glpi-project fedoraproject	glpi fedora	In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values.…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-11035	2024-11-21 13:56	2020-05-6	Show	GitHub Exploit DB Packet Storm

218042	6.1	MEDIUM Network	glpi-project	glpi	In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6.	CWE-601 Open Redirect	CVE-2020-11034	2024-11-21 13:56	2020-05-6	Show	GitHub Exploit DB Packet Storm

218043	7.2	HIGH Network	glpi-project	glpi	In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6.	CWE-89 SQL Injection	CVE-2020-11032	2024-11-21 13:56	2020-05-6	Show	GitHub Exploit DB Packet Storm

218044	6.5	MEDIUM Network	zohocorp	manageengine_desktop_central	Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request.	CWE-22 Path Traversal	CVE-2020-10859	2024-11-21 13:56	2020-05-6	Show	GitHub Exploit DB Packet Storm

218045	7.2	HIGH Network	glpi-project fedoraproject	glpi fedora	In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All ap…	CWE-200 Information Exposure	CVE-2020-11033	2024-11-21 13:56	2020-05-6	Show	GitHub Exploit DB Packet Storm

218046	4.8	MEDIUM Network	requarks	wiki.js	In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another edit…	CWE-79 Cross-site Scripting	CVE-2020-11051	2024-11-21 13:56	2020-05-6	Show	GitHub Exploit DB Packet Storm

218047	5.3	MEDIUM Network	ruby-lang fedoraproject debian	ruby fedora debian_linux	An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buff…	CWE-908 Use of Uninitialized Resource	CVE-2020-10933	2024-11-21 13:56	2020-05-5	Show	GitHub Exploit DB Packet Storm

218048	7.5	HIGH Network	oklok_project	oklok	The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) does not correctly implement its timeout on the four-digit verification code that is required for resetting passwor…	CWE-613 CWE-307 Insufficient Session Expiration mproper Restriction of Excessive Authentication Attempts	CVE-2020-10876	2024-11-21 13:56	2020-05-4	Show	GitHub Exploit DB Packet Storm

218049	4.7	MEDIUM Local	torchbox	wagtail	In Wagtail before versions 2.7.3 and 2.8.2, a potential timing attack exists on pages or documents that have been protected with a shared password through Wagtail's "Privacy" controls. This password …	CWE-362 Race Condition	CVE-2020-11037	2024-11-21 13:56	2020-05-1	Show	GitHub Exploit DB Packet Storm

218050	5.4	MEDIUM Network	wordpress debian	wordpress debian_linux	In affected versions of WordPress, a special payload can be crafted that can lead to scripts getting executed within the search block of the block editor. This requires an authenticated user with the…	CWE-79 Cross-site Scripting	CVE-2020-11030	2024-11-21 13:56	2020-05-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed