Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
258301 9.3 危険 マイクロソフト - Microsoft Office Excel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3128 2010-01-5 16:17 2009-11-10 Show GitHub Exploit DB Packet Storm
258302 9.3 危険 マイクロソフト - Microsoft Office および Open XML File Format Converter における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-3127 2010-01-5 16:16 2009-11-10 Show GitHub Exploit DB Packet Storm
258303 6.8 警告 アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
OpenSSL Project
レッドハット
- OpenSSL の SSL_get_shared_ciphers() 関数における一つずれエラーの脆弱性 CWE-189
数値処理の問題
CVE-2007-5135 2010-01-5 13:31 2007-10-12 Show GitHub Exploit DB Packet Storm
258304 7.8 危険 マイクロソフト - Microsoft Windows で稼働している Active Directory の LDAP サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-1928 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258305 9.3 危険 マイクロソフト - Microsoft Windows の kernel における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2514 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258306 6.8 警告 マイクロソフト - Microsoft Windows の kernel の Graphics Device Interface (GDI) における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-2513 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258307 6.8 警告 マイクロソフト - Microsoft Windows の kernel における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2009-1127 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258308 10 危険 マイクロソフト - Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2009-2523 2010-01-4 15:24 2009-11-10 Show GitHub Exploit DB Packet Storm
258309 9.3 危険 マイクロソフト - Microsoft Windows の Web Services on Devices API (WSDAPI) における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2009-2512 2010-01-4 15:23 2009-11-10 Show GitHub Exploit DB Packet Storm
258310 10 危険 アップル
VMware
サン・マイクロシステムズ
- Sun Java SE の Provider クラスにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2009-2722 2010-01-4 14:56 2009-08-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210491 8.4 HIGH
Local
siemens logo\!_soft_comfort A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnerable to DLL hijacking. Successful exploitation by a local… CWE-427
 Uncontrolled Search Path Element
CVE-2020-25244 2024-11-21 14:17 2021-04-23 Show GitHub Exploit DB Packet Storm
210492 5.1 MEDIUM
Local
siemens logo\!_soft_comfort A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised project file to the affected software. Chain… - CVE-2020-25243 2024-11-21 14:17 2021-04-23 Show GitHub Exploit DB Packet Storm
210493 9.8 CRITICAL
Network
grandstream grp2612_firmware
grp2612p_firmware
grp2612w_firmware
grp2613_firmware
grp2614_firmware
grp2615_firmware
grp2616_firmware
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allow Authentication Bypass in its administrative web interface. CWE-306
Missing Authentication for Critical Function
CVE-2020-25218 2024-11-21 14:17 2021-03-30 Show GitHub Exploit DB Packet Storm
210494 7.2 HIGH
Network
grandstream grp2612_firmware
grp2612p_firmware
grp2612w_firmware
grp2613_firmware
grp2614_firmware
grp2615_firmware
grp2616_firmware
Grandstream GRP261x VoIP phone running firmware version 1.0.3.6 (Base) allows Command Injection as root in its administrative web interface. CWE-77
Command Injection
CVE-2020-25217 2024-11-21 14:17 2021-03-30 Show GitHub Exploit DB Packet Storm
210495 8.6 HIGH
Network
squid-cache
debian
fedoraproject
netapp
squid
debian_linux
fedora
cloud_manager
An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request Smuggling and access services otherwise forbi… CWE-20
CWE-444
 Improper Input Validation 
HTTP Request Smuggling
CVE-2020-25097 2024-11-21 14:17 2021-03-19 Show GitHub Exploit DB Packet Storm
210496 7.5 HIGH
Network
siemens simatic_mv440_sr_firmware
simatic_mv440_hr_firmware
simatic_mv440_ur_firmware
simatic_mv420_sr-b_firmware
simatic_mv420_sr-p_firmware
simatic_mv420_sr-b_body_firmware
simatic_mv420_…
A vulnerability has been identified in SIMATIC MV400 family (All Versions < V7.0.6). The underlying TCP stack of the affected products does not correctly validate the sequence number for incoming TCP… CWE-129
 Improper Validation of Array Index
CVE-2020-25241 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm
210497 8.8 HIGH
Network
siemens sinema_remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). Unpriviledged users can access services when guessing the url. An attacker could impact availability, integr… - CVE-2020-25240 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm
210498 8.8 HIGH
Network
siemens sinema_remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.0). The webserver could allow unauthorized actions via special urls for unpriviledged users. The settings of the… - CVE-2020-25239 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm
210499 5.5 MEDIUM
Local
siemens logo\!_8_bm_firmware A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions), LOGO!… - CVE-2020-25236 2024-11-21 14:17 2021-03-16 Show GitHub Exploit DB Packet Storm
210500 8.8 HIGH
Network
advantech webaccess\/scada The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the filesystem and remotely execute code as an adminis… CWE-610
Externally Controlled Reference to a Resource in Another Sphere
CVE-2020-25161 2024-11-21 14:17 2021-02-24 Show GitHub Exploit DB Packet Storm