Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258411 9.3 危険 日本電気
サイバートラスト株式会社
MIT Kerberos
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
レッドハット		 - MIT Kerberos 5 RPC ライブラリの gssrpc__svcauth_gssapi() 関数における不正なメモリ領域が解放される脆弱性 - CVE-2007-2442 2010-07-15 17:19 2007-06-26 Show GitHub Exploit DB Packet Storm
258412 4.3 警告 VMware - 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2277 2010-07-14 17:27 2010-03-29 Show GitHub Exploit DB Packet Storm
258413 6.9 警告 VMware - 複数の VMware 製品の USB サービス における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1140 2010-07-14 17:27 2010-04-9 Show GitHub Exploit DB Packet Storm
258414 9.3 危険 シマンテック - Symantec Workspace Streaming (旧 Symantec AppStream) に脆弱性 CWE-287
不適切な認証 		CVE-2008-4389 2010-07-14 17:26 2010-06-22 Show GitHub Exploit DB Packet Storm
258415 5.8 警告 アップル - Apple iOS の設定アプリケーションにおけるユーザを追跡可能な脆弱性 CWE-DesignError
CVE-2010-1756 2010-07-14 17:26 2010-06-22 Show GitHub Exploit DB Packet Storm
258416 4.3 警告 アップル - Apple iOS の Safari におけるリモートの Web サーバがユーザを追跡可能な脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1755 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
258417 1.9 注意 アップル - Apple iOS の パスコードロックにおける任意のデータにアクセスされる脆弱性 CWE-362
競合状態 		CVE-2010-1775 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
258418 6.9 警告 アップル - Apple iOS の パスコードロックにおけるパスコード要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1754 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
258419 6.8 警告 アップル - Apple iOS の ImageIO における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1753 2010-07-14 17:25 2010-06-22 Show GitHub Exploit DB Packet Storm
258420 5 警告 アップル - Apple iOS の Application Sandbox におけるロケーション情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1751 2010-07-14 17:24 2010-06-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211871 9.8 CRITICAL
Network 		websitebaker websitebaker WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access … CWE-89
SQL Injection 		CVE-2020-25990 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211872 8.8 HIGH
Network 		bigbluebutton greenlight BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link. NVD-CWE-Other
CVE-2020-26163 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211873 7.5 HIGH
Network 		jwt-go_project jwt-go jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fai… CWE-287
CWE-755
Improper Authentication
 Improper Handling of Exceptional Conditions 		CVE-2020-26160 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211874 9.6 CRITICAL
Network 		leanote leanote Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration. CWE-79
Cross-site Scripting 		CVE-2020-26158 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211875 9.6 CRITICAL
Network 		leanote leanote Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration. CWE-79
Cross-site Scripting 		CVE-2020-26157 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211876 9.8 CRITICAL
Network 		libproxy_project
fedoraproject
debian
opensuse 		libproxy
fedora
debian_linux
leap 		url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. CWE-120
Classic Buffer Overflow 		CVE-2020-26154 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211877 7.5 HIGH
Network 		logaritmo aware_callmanager info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. CWE-425
 Direct Request ('Forced Browsing') 		CVE-2020-26150 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211878 7.5 HIGH
Network 		linuxfoundation nats.deno
nats.js
nats.ws 		NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-26149 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211879 7.5 HIGH
Network 		md4c_project md4c md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document. CWE-908
 Use of Uninitialized Resource 		CVE-2020-26148 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211880 6.5 MEDIUM
Network 		python
canonical
debian
oracle 		urllib3
ubuntu_linux
debian_linux
zfs_storage_appliance_kit
communications_cloud_native_core_network_function_cloud_native_environment 		urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest(). NOTE: th… CWE-74
Injection 		CVE-2020-26137 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm