Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259841	9.3	危険	アップル	-	Apple Safari の ImageIO における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0043	2010-07-13 16:30	2010-03-15	Show	GitHub Exploit DB Packet Storm

259842	4.3	警告	アップル	-	Apple Safari の ImageIO における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-0041	2010-07-13 16:29	2010-03-15	Show	GitHub Exploit DB Packet Storm

259843	6.8	警告	アップルサイバートラスト株式会社 Mozilla Foundation レッドハット	-	libc における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2009-0689	2010-07-13 16:28	2009-07-1	Show	GitHub Exploit DB Packet Storm

259844	6.8	警告	アップル	-	WebKit におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2816	2010-07-13 16:28	2009-11-11	Show	GitHub Exploit DB Packet Storm

259845	9.3	危険	アップル	-	Apple Safari の WebKit におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-2195	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

259846	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml の Notation または Enumeration 属性タイプの処理におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2009-2416	2010-07-13 16:27	2009-08-11	Show	GitHub Exploit DB Packet Storm

259847	4.3	警告	xmlsoft.org アップルサイバートラスト株式会社サン・マイクロシステムズ OpenOffice.org Project レッドハット	-	libxml2 および libxml における DTD 内の要素宣言の処理に関するサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-2414	2010-07-13 16:26	2009-08-11	Show	GitHub Exploit DB Packet Storm

259848	4.3	警告	アップル	-	Apple Mac OS の CFNetwork における任意の HTTPS Web サイトを訪問しているように偽装可能な脆弱性	CWE-Other その他	CVE-2009-1723	2010-07-13 16:25	2009-08-5	Show	GitHub Exploit DB Packet Storm

259849	3.5	注意	アップル	-	Apple Mac OS X の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1382	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

259850	3.5	注意	アップル	-	Apple Mac OS X の SMB ファイルサーバにおける任意のファイルにアクセスされる脆弱性	CWE-16 環境設定	CVE-2010-1381	2010-07-12 18:12	2010-06-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211791	6.8	MEDIUM Physics	solokeys nitrokey	solo_firmware somu_firmware fido2_firmware	The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade …	CWE-326 Inadequate Encryption Strength	CVE-2020-27208	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

211792	7.5	HIGH Network	micro-ecc_project	micro-ecc	The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key.	NVD-CWE-noinfo	CVE-2020-27209	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

211793	7.5	HIGH Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27185	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211794	5.9	MEDIUM Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-th…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27184	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211795	7.5	HIGH Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-…	NVD-CWE-noinfo	CVE-2020-27150	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211796	6.5	MEDIUM Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration chan…	NVD-CWE-noinfo	CVE-2020-27149	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211797	7.5	HIGH Network	kaspersky	password_manager	Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker woul…	CWE-326 Inadequate Encryption Strength	CVE-2020-27020	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211798	8.8	HIGH Network	openclinic_ga_project	openclinic_ga	An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoComment parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authen…	CWE-89 SQL Injection	CVE-2020-27246	2024-11-21 14:20	2021-05-11	Show	GitHub Exploit DB Packet Storm

211799	8.8	HIGH Network	openclinic_ga_project	openclinic_ga	An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenti…	CWE-89 SQL Injection	CVE-2020-27245	2024-11-21 14:20	2021-05-11	Show	GitHub Exploit DB Packet Storm

211800	8.8	HIGH Network	openclinic_ga_project	openclinic_ga	An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authentic…	CWE-89 SQL Injection	CVE-2020-27244	2024-11-21 14:20	2021-05-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed