Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258471 10 危険 マイクロソフト - Microsoft Windows の SMB クライアントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-0269 2010-05-10 19:09 2010-04-13 Show GitHub Exploit DB Packet Storm
258472 9.3 危険 マイクロソフト - Microsoft Windows の Cabinet File Viewer Shell Extension における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0487 2010-05-10 19:09 2010-04-13 Show GitHub Exploit DB Packet Storm
258473 9.3 危険 マイクロソフト - Microsoft Windows の Authenticode Signature Verification における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0486 2010-05-10 19:09 2010-04-13 Show GitHub Exploit DB Packet Storm
258474 4.7 警告 サイバートラスト株式会社
Linux
レッドハット		 - x86_64 および amd64 プラットフォーム上 Linux Kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4271 2010-05-10 18:25 2010-03-16 Show GitHub Exploit DB Packet Storm
258475 5 警告 VMware - VMware Authorization Service の VMware Authentication Daemon におけるサービス運用妨害 (DoS) の脆弱性 CWE-134
書式文字列の問題 		CVE-2009-3707 2010-05-7 17:26 2009-10-16 Show GitHub Exploit DB Packet Storm
258476 9.3 危険 VMware - VMnc メディアコーデックおよびムービーデコーダにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2009-1565 2010-05-7 17:26 2010-04-9 Show GitHub Exploit DB Packet Storm
258477 9.3 危険 VMware - VMnc メディアコーデックおよびムービーデコーダにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1564 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258478 10 危険 VMware - VMware Remote Console の vmware-vmrc.exe build 158248 における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題 		CVE-2009-3732 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258479 7.2 危険 VMware - 複数の VMware 製品の vmrun における権限昇格の脆弱性 CWE-134
書式文字列の問題 		CVE-2010-1139 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
258480 5 警告 VMware - 複数の VMware 製品の仮想ネットワークスタックにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-1138 2010-05-7 17:25 2010-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211701 6.1 MEDIUM
Network 		antsword_project antsword AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code… CWE-79
Cross-site Scripting 		CVE-2020-25470 2024-11-21 14:18 2020-10-26 Show GitHub Exploit DB Packet Storm
211702 9.8 CRITICAL
Network 		ucms_project ucms An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-25483 2024-11-21 14:18 2020-10-24 Show GitHub Exploit DB Packet Storm
211703 9.8 CRITICAL
Network 		crmeb crmeb A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-25466 2024-11-21 14:18 2020-10-24 Show GitHub Exploit DB Packet Storm
211704 6.5 MEDIUM
Network 		bigbluebutton bigbluebutton BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-25820 2024-11-21 14:18 2020-10-21 Show GitHub Exploit DB Packet Storm
211705 7.5 HIGH
Network 		mozilla
redhat
fedoraproject
oracle 		network_security_services
enterprise_linux
fedora
communications_offline_mediation_controller
communications_pricing_design_center
jd_edwards_enterpriseone_tools 		A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-25648 2024-11-21 14:18 2020-10-21 Show GitHub Exploit DB Packet Storm
211706 7.5 HIGH
Network 		qualcomm qualcomm_mobile_access_point The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() functi… CWE-476
 NULL Pointer Dereference 		CVE-2020-25858 2024-11-21 14:18 2020-10-16 Show GitHub Exploit DB Packet Storm
211707 7.5 HIGH
Network 		powerdns
opensuse 		recursor
leap
backports_sle 		An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSS… NVD-CWE-noinfo
CVE-2020-25829 2024-11-21 14:18 2020-10-16 Show GitHub Exploit DB Packet Storm
211708 6.7 MEDIUM
Local 		qualcomm qcmap The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A lo… CWE-78
OS Command  		CVE-2020-25859 2024-11-21 14:18 2020-10-16 Show GitHub Exploit DB Packet Storm
211709 2.4 LOW
Physics 		telegram telegram_desktop Telegram Desktop through 2.4.3 does not require passcode entry upon pushing the Export key within the Export Telegram Data wizard. The threat model is a victim who has voluntarily opened Export Wizar… CWE-306
Missing Authentication for Critical Function 		CVE-2020-25824 2024-11-21 14:18 2020-10-15 Show GitHub Exploit DB Packet Storm
211710 6.0 MEDIUM
Local 		trendmicro antivirus Trend Micro Antivirus for Mac 2020 (Consumer) has a vulnerability in a specific kernel extension where an attacker could supply a kernel pointer and leak several bytes of memory. An attacker must fir… CWE-209
Information Exposure Through an Error Message 		CVE-2020-25778 2024-11-21 14:18 2020-10-15 Show GitHub Exploit DB Packet Storm