Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257711 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257712 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257713 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257714 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
257715 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
257716 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
257717 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2723 2010-01-4 14:55 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208961 5.3 MEDIUM
Network
google android An issue was discovered on Samsung mobile devices with Q(10.0) software. The DynamicLockscreen Terms and Conditions can be accepted without authentication. The Samsung ID is SVE-2020-17079 (October 2… CWE-306
Missing Authentication for Critical Function
CVE-2020-26599 2024-11-21 14:20 2020-10-7 Show GitHub Exploit DB Packet Storm
208962 7.5 HIGH
Network
google android An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, and 9.0 software. The Network Management component could allow an unauthorized actor to kill a TCP connection. The LG ID is LVE-… CWE-862
 Missing Authorization
CVE-2020-26598 2024-11-21 14:20 2020-10-7 Show GitHub Exploit DB Packet Storm
208963 7.5 HIGH
Network
google android An issue was discovered on LG mobile devices with Android OS 9.0 and 10 software. The Wi-Fi subsystem has incorrect input validation, leading to a crash. The LG ID is LVE-SMP-200022 (October 2020). CWE-20
 Improper Input Validation 
CVE-2020-26597 2024-11-21 14:20 2020-10-7 Show GitHub Exploit DB Packet Storm
208964 8.8 HIGH
Network
dlink dap-1360u_firmware D-Link DAP-1360U before 3.0.1 devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the IP JSON value for ping (aka res_config_action=3&res_config_id=18). CWE-78
OS Command 
CVE-2020-26582 2024-11-21 14:20 2020-10-7 Show GitHub Exploit DB Packet Storm
208965 7.5 HIGH
Network
wireshark
fedoraproject
debian
oracle
wireshark
fedora
debian_linux
zfs_storage_appliance_firmware
In Wireshark through 3.2.7, the Facebook Zero Protocol (aka FBZERO) dissector could enter an infinite loop. This was addressed in epan/dissectors/packet-fbzero.c by correcting the implementation of o… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-26575 2024-11-21 14:20 2020-10-7 Show GitHub Exploit DB Packet Storm
208966 9.6 CRITICAL
Network
leostream connection_broker Leostream Connection Broker 8.2.x is affected by stored XSS. An unauthenticated attacker can inject arbitrary JavaScript code via the webquery.pl User-Agent HTTP header. It is rendered by the admins … CWE-79
Cross-site Scripting
CVE-2020-26574 2024-11-21 14:20 2020-10-7 Show GitHub Exploit DB Packet Storm
208967 5.5 MEDIUM
Local
opensc_project
fedoraproject
debian
opensc
fedora
debian_linux
The TCOS smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in tcos_decipher. CWE-787
 Out-of-bounds Write
CVE-2020-26572 2024-11-21 14:20 2020-10-6 Show GitHub Exploit DB Packet Storm
208968 5.5 MEDIUM
Local
opensc_project
debian
fedoraproject
opensc
debian_linux
fedora
The gemsafe GPK smart card software driver in OpenSC before 0.21.0-rc1 has a stack-based buffer overflow in sc_pkcs15emu_gemsafeGPK_init. CWE-787
 Out-of-bounds Write
CVE-2020-26571 2024-11-21 14:20 2020-10-6 Show GitHub Exploit DB Packet Storm
208969 5.5 MEDIUM
Local
opensc_project
fedoraproject
debian
opensc
fedora
debian_linux
The Oberthur smart card software driver in OpenSC before 0.21.0-rc1 has a heap-based buffer overflow in sc_oberthur_read_file. CWE-787
 Out-of-bounds Write
CVE-2020-26570 2024-11-21 14:20 2020-10-6 Show GitHub Exploit DB Packet Storm
208970 9.8 CRITICAL
Network
damstratechnology smart_asset An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin: example.com' header and responding wi… CWE-346
 Origin Validation Error
CVE-2020-26527 2024-11-21 14:20 2020-10-3 Show GitHub Exploit DB Packet Storm