Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258371 9.3 危険 マイクロソフト - Microsoft Windows Help and Support Center に脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2010-1885 2010-07-23 18:55 2010-06-10 Show GitHub Exploit DB Packet Storm
258372 4.9 警告 マイクロソフト - Microsoft Windows の Canonical Display Driver における任意のコードを実行される脆弱性 CWE-DesignError
CVE-2009-3678 2010-07-23 18:55 2010-05-14 Show GitHub Exploit DB Packet Storm
258373 9.3 危険 サン・マイクロシステムズ
レッドハット
リアルネットワークス		 - Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 CWE-119
バッファエラー 		CVE-2009-4247 2010-07-23 18:55 2010-01-19 Show GitHub Exploit DB Packet Storm
258374 10 危険 サイバートラスト株式会社
Apache Software Foundation		 - Apache Geronimo の LoginModule 実装における認証要求を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-4548 2010-07-22 20:51 2007-08-13 Show GitHub Exploit DB Packet Storm
258375 5 警告 サイバートラスト株式会社
Apache Software Foundation		 - Apache Geronimo の management EJB における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5085 2010-07-22 20:51 2007-09-6 Show GitHub Exploit DB Packet Storm
258376 7.5 危険 サイバートラスト株式会社
Apache Software Foundation		 - Apache Geronimo の SQLLoginModule における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2007-5797 2010-07-22 20:51 2007-10-22 Show GitHub Exploit DB Packet Storm
258377 6.8 警告 InterSect Alliance International Pty - Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-2594 2010-07-22 20:51 2010-06-30 Show GitHub Exploit DB Packet Storm
258378 5.5 警告 富士通 - Internet Navigware Server における情報漏えいの脆弱性 CWE-200
情報漏えい 		- 2010-07-22 20:51 2010-06-18 Show GitHub Exploit DB Packet Storm
258379 7.8 危険 サイバートラスト株式会社
Linux
レッドハット		 - Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-3726 2010-07-22 17:53 2009-11-9 Show GitHub Exploit DB Packet Storm
258380 5 警告 IBM
アップル
サイバートラスト株式会社
サン・マイクロシステムズ
ヒューレット・パッカード
マイクロソフト
オラクル
OpenOffice.org Project
レッドハット		 - XML 署名の検証において認証回避が可能な問題 CWE-DesignError
CVE-2009-0217 2010-07-22 17:52 2009-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211871 9.8 CRITICAL
Network 		websitebaker websitebaker WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access … CWE-89
SQL Injection 		CVE-2020-25990 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211872 8.8 HIGH
Network 		bigbluebutton greenlight BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link. NVD-CWE-Other
CVE-2020-26163 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211873 7.5 HIGH
Network 		jwt-go_project jwt-go jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fai… CWE-287
CWE-755
Improper Authentication
 Improper Handling of Exceptional Conditions 		CVE-2020-26160 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211874 9.6 CRITICAL
Network 		leanote leanote Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration. CWE-79
Cross-site Scripting 		CVE-2020-26158 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211875 9.6 CRITICAL
Network 		leanote leanote Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration. CWE-79
Cross-site Scripting 		CVE-2020-26157 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211876 9.8 CRITICAL
Network 		libproxy_project
fedoraproject
debian
opensuse 		libproxy
fedora
debian_linux
leap 		url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. CWE-120
Classic Buffer Overflow 		CVE-2020-26154 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211877 7.5 HIGH
Network 		logaritmo aware_callmanager info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2020-26150 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211878 7.5 HIGH
Network 		linuxfoundation nats.deno
nats.js
nats.ws 		NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-26149 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211879 7.5 HIGH
Network 		md4c_project md4c md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document. CWE-908
 Use of Uninitialized Resource 		CVE-2020-26148 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211880 6.5 MEDIUM
Network 		python
canonical
debian
oracle 		urllib3
ubuntu_linux
debian_linux
zfs_storage_appliance_kit
communications_cloud_native_core_network_function_cloud_native_environment 		urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: th… CWE-74
Injection 		CVE-2020-26137 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm