Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258721 6.8 警告 アップル - Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1808 2010-09-8 15:51 2010-08-25 Show GitHub Exploit DB Packet Storm
258722 6.2 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo の secure path 機能における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1646 2010-09-8 15:50 2010-06-7 Show GitHub Exploit DB Packet Storm
258723 6.9 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1163 2010-09-8 15:50 2010-04-16 Show GitHub Exploit DB Packet Storm
258724 10 危険 ESET
アップル
ClamAV
ソースネクスト		 - 複数のアンチウィルス製品に脆弱性 CWE-noinfo
情報不足 		CVE-2010-0098 2010-09-8 15:50 2010-04-13 Show GitHub Exploit DB Packet Storm
258725 7.5 危険 The PHP Group
アップル		 - PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1129 2010-09-8 15:49 2010-03-26 Show GitHub Exploit DB Packet Storm
258726 4.4 警告 サイバートラスト株式会社
Todd C. Miller
ターボリナックス
レッドハット		 - sudo における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0427 2010-09-8 15:49 2010-02-25 Show GitHub Exploit DB Packet Storm
258727 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM の subpage MMIO initialization 機能における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2784 2010-09-7 15:51 2010-08-19 Show GitHub Exploit DB Packet Storm
258728 6.6 警告 サイバートラスト株式会社
レッドハット		 - QEMU-KVM のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0431 2010-09-7 15:50 2010-08-19 Show GitHub Exploit DB Packet Storm
258729 6.6 警告 サイバートラスト株式会社
レッドハット		 - 複数のレッドハット製品などで利用される libspice のメモリ管理操作における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0429 2010-09-7 15:49 2010-08-19 Show GitHub Exploit DB Packet Storm
258730 6.6 警告 サイバートラスト株式会社
レッドハット		 - 複数のレッドハット製品などで利用される libspice のゲスト QXL ドライバポインタにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0428 2010-09-7 15:48 2010-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213221 5.7 MEDIUM
Physics 		apple
google 		exposure_notifications An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a positio… NVD-CWE-noinfo
CVE-2020-24721 2024-11-21 14:15 2020-10-1 Show GitHub Exploit DB Packet Storm
213222 6.5 MEDIUM
Network 		mbconnectline mymbconnect24
mbconnect24 		An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session in… CWE-352
CWE-918
 Origin Validation Error
Server-Side Request Forgery (SSRF)  		CVE-2020-24570 2024-11-21 14:15 2020-10-1 Show GitHub Exploit DB Packet Storm
213223 4.3 MEDIUM
Network 		mbconnectline mymbconnect24
mbconnect24 		An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in att… CWE-89
SQL Injection 		CVE-2020-24569 2024-11-21 14:15 2020-10-1 Show GitHub Exploit DB Packet Storm
213224 5.5 MEDIUM
Local 		trendmicro apex_one An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installation… CWE-125
Out-of-bounds Read 		CVE-2020-24565 2024-11-21 14:15 2020-09-29 Show GitHub Exploit DB Packet Storm
213225 5.5 MEDIUM
Local 		trendmicro apex_one An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installation… CWE-125
Out-of-bounds Read 		CVE-2020-24564 2024-11-21 14:15 2020-09-29 Show GitHub Exploit DB Packet Storm
213226 8.2 HIGH
Local 		freebsd
omniosce
openindiana
netapp 		freebsd
omnios
openindiana
clustered_data_ontap 		bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demons… CWE-862
 Missing Authorization 		CVE-2020-24718 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
213227 7.1 HIGH
Local 		mitel micontact_center_business The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allo… CWE-79
CWE-20
Cross-site Scripting
 Improper Input Validation  		CVE-2020-24692 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
213228 8.8 HIGH
Network 		openmrs htmlformentry A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Lan… CWE-22
Path Traversal 		CVE-2020-24621 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
213229 5.3 MEDIUM
Network 		pexip pexip_infinity Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP. CWE-20
 Improper Input Validation  		CVE-2020-24615 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm
213230 5.3 MEDIUM
Network 		mitel micloud_management_portal Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control. NVD-CWE-noinfo
CVE-2020-24595 2024-11-21 14:15 2020-09-25 Show GitHub Exploit DB Packet Storm