Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
133011 9.8 緊急
Network
Huawei EMUI
Magic UI
複数の Huawei スマートフォンにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2020-9144 2021-09-22 18:11 2020-02-18 Show GitHub Exploit DB Packet Storm
133012 7.2 重要
Network
Nagios Enterprises, LLC Nagios XI Nagios XI における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2020-35578 2021-09-22 18:11 2020-12-19 Show GitHub Exploit DB Packet Storm
133013 7.5 重要
Network
jQueryValidation
NetApp
SnapCenter
jQuery Validation
jQuery Validation プラグインにおけるリソースの枯渇に関する脆弱性 CWE-400
リソースの枯渇
CVE-2021-21252 2021-09-22 18:11 2021-01-10 Show GitHub Exploit DB Packet Storm
133014 7.2 重要
Network
coturn project coturn Coturn における計算の誤りに関する脆弱性 CWE-441
CWE-682
CVE-2020-26262 2021-09-22 18:11 2020-10-1 Show GitHub Exploit DB Packet Storm
133015 9.8 緊急
Network
ctolog ThinkAdmin ThinkAdmin における信頼できないデータのデシリアライゼーションに関する脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2020-23653 2021-09-22 18:11 2020-01-2 Show GitHub Exploit DB Packet Storm
133016 7.1 重要
Network
Gin Team Gin gin における HTTP リクエストスマグリングに関する脆弱性 CWE-444
HTTP リクエストスマグリング
CVE-2020-28483 2021-09-22 17:54 2020-11-19 Show GitHub Exploit DB Packet Storm
133017 8.8 重要
Network
softwaremill akka-http-session akka-http-session におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2020-28452 2021-09-22 17:54 2020-11-25 Show GitHub Exploit DB Packet Storm
133018 5.3 警告
Network
シスコシステムズ
Snort.org
Snort
Cisco FirePOWER Management Center
Cisco Firepower Threat Defense ソフトウェア
Cisco IOS XE
複数の Cisco 製品における常に不適切な制御フローの実装に関する脆弱性 CWE-670
常に不適切な制御フローの実装
CVE-2021-1236 2021-09-22 17:52 2021-01-13 Show GitHub Exploit DB Packet Storm
133019 6.5 警告
Network
シスコシステムズ Cisco Unified Communications Manager IM and Presence Service
Cisco Emergency Responder ソフトウェア
Cisco Unified Communications Manag…
複数の Cisco 製品におけるログファイルからの情報漏えいに関する脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2021-1226 2021-09-22 17:52 2021-01-13 Show GitHub Exploit DB Packet Storm
133020 7.8 重要
Local
シスコシステムズ Cisco AnyConnect Secure Mobility Client Windows 用 Cisco AnyConnect Secure Mobility Client における制御されていない検索パスの要素に関する脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2021-1237 2021-09-22 17:52 2021-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
307041 - hinnendahl gaestebuch PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter. CWE-94
Code Injection
CVE-2010-4884 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307042 - modx revolution Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter. CWE-79
Cross-site Scripting
CVE-2010-4883 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307043 - ventics auto_cms Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter. CWE-79
Cross-site Scripting
CVE-2010-4882 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307044 - apphp apphp_calendar Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to hijack the authentication of unspecified victims for requests … CWE-352
 Origin Validation Error
CVE-2010-4881 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307045 - apphp apphp_calendar Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name, (2) ca… CWE-79
Cross-site Scripting
CVE-2010-4880 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307046 - digitaljunkies dompdf PHP remote file inclusion vulnerability in dompdf.php in dompdf 0.6.0 beta1 allows remote attackers to execute arbitrary PHP code via a URL in the input_file parameter. CWE-94
Code Injection
CVE-2010-4879 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307047 - hinnendahl kontakt_formular PHP remote file inclusion vulnerability in formmailer.php in Kontakt Formular 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter. CWE-94
Code Injection
CVE-2010-4878 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307048 - insanevisions onecms Cross-site scripting (XSS) vulnerability in index.php in OneCMS 2.6.1 allows remote attackers to inject arbitrary web script or HTML via the view parameter. CWE-79
Cross-site Scripting
CVE-2010-4877 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307049 - mblogger_project mblogger SQL injection vulnerability in viewpost.php in mBlogger 1.0.04 allows remote attackers to execute arbitrary SQL commands via the postID parameter. CWE-89
SQL Injection
CVE-2010-4876 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm
307050 - xondie vodpod_video_gallery Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting
CVE-2010-4875 2024-11-21 10:21 2011-10-7 Show GitHub Exploit DB Packet Storm