Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 11, 2026, 12:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258741 | 5 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0348 | 2010-01-12 15:01 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 258742 | 4.3 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0349 | 2010-01-12 15:00 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 258743 | 10 | 危険 | サイバートラスト株式会社 XEmacs |
- | XEmacs の glyphs-eimage.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-2688 | 2010-01-12 14:48 | 2009-08-5 | Show | GitHub Exploit DB Packet Storm |
| 258744 | 6.8 | 警告 | IBM | - | IBM WebSphere Application Server (WAS) におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-2746 | 2010-01-12 14:48 | 2009-11-13 | Show | GitHub Exploit DB Packet Storm |
| 258745 | 5 | 警告 | アップル | - | Apple Safari におけるローカル HTML ファイルを読まれる脆弱性 |
CWE-Other
その他 |
CVE-2009-2842 | 2010-01-7 12:09 | 2009-11-11 | Show | GitHub Exploit DB Packet Storm |
| 258746 | 5.5 | 警告 | シックス・アパート株式会社 | - | Movable Type におけるアクセス制限回避の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
- | 2010-01-6 15:01 | 2010-01-6 | Show | GitHub Exploit DB Packet Storm |
| 258747 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Word および Open XML File Format Converter における、任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3135 | 2010-01-6 14:44 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 258748 | 5 | 警告 | トレンドマイクロ 日本電気 Apache Software Foundation 富士通 サイバートラスト株式会社 サン・マイクロシステムズ ヒューレット・パッカード レッドハット |
- | Apache Tomcat の Apache HTTP Server との組合せによるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-0450 | 2010-01-6 14:43 | 2007-03-16 | Show | GitHub Exploit DB Packet Storm |
| 258749 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel および Open XML File Format Converter におけるオブジェクトを含むスプレッドシートの処理に関する任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3133 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
| 258750 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office Excel および Open XML File Format Converter における BIFF レコードの処理に関する任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3130 | 2010-01-5 16:18 | 2009-11-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 11, 2026, 5:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211351 | 6.1 |
MEDIUM
Network |
dogtagpki | dogtagpki | A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get auto… |
CWE-79
Cross-site Scripting |
CVE-2020-25715 | 2024-11-21 14:18 | 2021-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211352 | 7.5 |
HIGH
Network |
openldap redhat debian fedoraproject |
openldap enterprise_linux jboss_enterprise_web_server jboss_enterprise_application_platform jboss_core_services debian_linux fedora |
A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest th… | - | CVE-2020-25710 | 2024-11-21 14:18 | 2021-05-28 | Show | GitHub Exploit DB Packet Storm |
| 211353 | 4.3 |
MEDIUM
Network |
redhat quarkus |
resteasy quarkus |
A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerabi… | - | CVE-2020-25724 | 2024-11-21 14:18 | 2021-05-27 | Show | GitHub Exploit DB Packet Storm |
| 211354 | 5.4 |
MEDIUM
Network |
redhat |
3scale_api_management 3scale |
A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scal… |
CWE-306
Missing Authentication for Critical Function |
CVE-2020-25634 | 2024-11-21 14:18 | 2021-05-27 | Show | GitHub Exploit DB Packet Storm |
| 211355 | 7.0 |
HIGH
Local |
x.org | x_server | A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the ser… | - | CVE-2020-25697 | 2024-11-21 14:18 | 2021-05-26 | Show | GitHub Exploit DB Packet Storm |
| 211356 | 7.0 |
HIGH
Local |
linux debian netapp |
linux_kernel debian_linux cloud_backup solidfire_\&_hci_management_node solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h70… |
A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op. |
CWE-662
Improper Synchronization |
CVE-2020-25668 | 2024-11-21 14:18 | 2021-05-26 | Show | GitHub Exploit DB Packet Storm |
| 211357 | 7.8 |
HIGH
Local |
linux debian netapp |
linux_kernel debian_linux cloud_backup solidfire_\&_hci_management_node solidfire_baseboard_management_controller h300s_firmware h500s_firmware h700s_firmware h300e_firmwa… |
A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkb… | - | CVE-2020-25669 | 2024-11-21 14:18 | 2021-05-26 | Show | GitHub Exploit DB Packet Storm |
| 211358 | 5.5 |
MEDIUM
Local |
linux fedoraproject netapp |
linux_kernel fedora cloud_backup active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h700s_firmware h3… |
A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system. | - | CVE-2020-25673 | 2024-11-21 14:18 | 2021-05-26 | Show | GitHub Exploit DB Packet Storm |
| 211359 | 7.8 |
HIGH
Local |
linux fedoraproject netapp debian |
linux_kernel fedora cloud_backup active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h700s_firmware h3… |
A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations. | - | CVE-2020-25671 | 2024-11-21 14:18 | 2021-05-26 | Show | GitHub Exploit DB Packet Storm |
| 211360 | 7.8 |
HIGH
Local |
linux fedoraproject netapp debian |
linux_kernel fedora cloud_backup active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h700s_firmware h3… |
A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations. | - | CVE-2020-25670 | 2024-11-21 14:18 | 2021-05-26 | Show | GitHub Exploit DB Packet Storm |