Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
260081 5.8 警告 サン・マイクロシステムズ
GNOME Project
レッドハット		 - Evolution Data Server (別名 evolution-data-server) の ntlm_challenge 関数におけるプロセスメモリ情報の漏洩またはサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0582 2010-05-14 18:37 2009-03-14 Show GitHub Exploit DB Packet Storm
260082 1.2 注意 日本電気
サイバートラスト株式会社
サン・マイクロシステムズ
ターボリナックス
OpenSSL Project
レッドハット		 - RSA key reconstruction vulnerability - CVE-2007-3108 2010-05-14 18:37 2007-08-16 Show GitHub Exploit DB Packet Storm
260083 5 警告 ヒューレット・パッカード
サイバートラスト株式会社
OpenSSL Project
ターボリナックス
レッドハット		 - OpenSSL の zlib_stateful_finish 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4355 2010-05-13 17:21 2010-01-13 Show GitHub Exploit DB Packet Storm
260084 9.3 危険 日立 - XMAP3 における任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		- 2010-05-13 15:14 2010-04-12 Show GitHub Exploit DB Packet Storm
260085 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Plan In-Season コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0863 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
260086 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Place In-Season コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0864 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
260087 4.3 警告 オラクル - Oracle Industry Product Suite の Retail - Oracle Retail Markdown Optimization コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0862 2010-05-13 15:13 2010-04-13 Show GitHub Exploit DB Packet Storm
260088 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Thesaurus Management System コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0875 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
260089 4.3 警告 オラクル - Oracle Industry Product Suite の Life Sciences - Oracle Clinical Remote Data Capture Option コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0876 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
260090 4.3 警告 オラクル - Oracle Industry Product Suite の Communications - Oracle Communications Unified Inventory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-0874 2010-05-13 15:12 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201471 5.3 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. - CVE-2021-20282 2024-11-21 14:46 2021-03-16 Show GitHub Exploit DB Packet Storm
201472 5.3 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. CWE-863
 Incorrect Authorization 		CVE-2021-20281 2024-11-21 14:46 2021-03-16 Show GitHub Exploit DB Packet Storm
201473 5.4 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. - CVE-2021-20280 2024-11-21 14:46 2021-03-16 Show GitHub Exploit DB Packet Storm
201474 5.4 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17. CWE-79
Cross-site Scripting 		CVE-2021-20279 2024-11-21 14:46 2021-03-16 Show GitHub Exploit DB Packet Storm
201475 2.7 LOW
Network 		redhat libnbd
enterprise_linux 		A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service. - CVE-2021-20286 2024-11-21 14:46 2021-03-16 Show GitHub Exploit DB Packet Storm
201476 4.3 MEDIUM
Network 		ibm api_connect IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager … NVD-CWE-noinfo
CVE-2021-20440 2024-11-21 14:46 2021-03-16 Show GitHub Exploit DB Packet Storm
201477 8.1 HIGH
Network 		dogtagpki
redhat
fedoraproject 		dogtagpki
enterprise_linux
certificate_system
fedora 		A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoke… - CVE-2021-20179 2024-11-21 14:46 2021-03-15 Show GitHub Exploit DB Packet Storm
201478 9.8 CRITICAL
Network 		gnu
redhat
fedoraproject 		gnutls
enterprise_linux
fedora 		A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences. - CVE-2021-20232 2024-11-21 14:46 2021-03-13 Show GitHub Exploit DB Packet Storm
201479 9.8 CRITICAL
Network 		gnu
redhat
fedoraproject
netapp 		gnutls
enterprise_linux
fedora
active_iq_unified_manager
e-series_performance_analyzer 		A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences. - CVE-2021-20231 2024-11-21 14:46 2021-03-13 Show GitHub Exploit DB Packet Storm
201480 7.8 HIGH
Local 		ntt-tx magicconnect Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified dire… CWE-427
 Uncontrolled Search Path Element 		CVE-2021-20674 2024-11-21 14:46 2021-03-12 Show GitHub Exploit DB Packet Storm