Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225911 7.5 危険 SystemTap - SystemTap の stap-server における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0412 2012-12-20 19:28 2010-02-24 Show GitHub Exploit DB Packet Storm
225912 7.5 危険 phpgroupware - phpgw における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0404 2012-12-20 19:28 2010-05-19 Show GitHub Exploit DB Packet Storm
225913 6.8 警告 phpgroupware - phpgw の about.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0403 2012-12-20 19:28 2010-05-19 Show GitHub Exploit DB Packet Storm
225914 9.3 危険 thegreenbow - TheGreenBow IPSec VPN Client の vpnconf.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0392 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
225915 6.8 警告 phpf1 - PHP F1 Max の Image Uploader における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-0390 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
225916 5 警告 サン・マイクロシステムズ - Sun Java System Web Server の admin サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0389 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
225917 5 警告 The Tor Project - Tor におけるブリッジ ID などについて重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0385 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
225918 2.1 注意 The Tor Project - Tor におけるクライアントの ID を特定される脆弱性 CWE-200
情報漏えい 		CVE-2010-0384 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
225919 5 警告 The Tor Project - Tor におけるトラフィックの送信元などの匿名性を侵害される脆弱性 CWE-200
情報漏えい 		CVE-2010-0383 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
225920 7.5 危険 phpmyspace - PHP MySpace の modules/arcade/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0381 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211391 6.5 MEDIUM
Network 		roundcube
debian 		webmail
debian_linux 		An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. CWE-352
 Origin Validation Error 		CVE-2020-12626 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
211392 6.1 MEDIUM
Network 		roundcube
debian
opensuse 		webmail
debian_linux
leap
backports_sle 		An issue was discovered in Roundcube Webmail before 1.4.4. There is a cross-site scripting (XSS) vulnerability in rcube_washtml.php because JavaScript code can occur in the CDATA of an HTML message. CWE-79
Cross-site Scripting 		CVE-2020-12625 2024-11-21 13:59 2020-05-4 Show GitHub Exploit DB Packet Storm
211393 6.5 MEDIUM
Network 		theleague the_league The League application before 2020-05-02 on Android sends a bearer token in an HTTP Authorization header to an arbitrary web site that hosts an external image because an OkHttp object is reused, whic… CWE-459
 Incomplete Cleanup 		CVE-2020-12624 2024-11-21 13:59 2020-05-3 Show GitHub Exploit DB Packet Storm
211394 6.5 MEDIUM
Network 		telegram telegram
telegram_desktop 		Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL. NVD-CWE-noinfo
CVE-2020-12474 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
211395 5.3 MEDIUM
Network 		moxa nport_5100a_firmware Moxa Service in Moxa NPort 5150A firmware version 1.5 and earlier allows attackers to obtain sensitive configuration values via a crafted packet to UDP port 4800. NOTE: Moxa Service is an unauthentic… CWE-306
Missing Authentication for Critical Function 		CVE-2020-12117 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
211396 7.0 HIGH
Local 		fedoraproject
opensuse
sqliteodbc_project 		fedora
backports_sle
sqliteodbc 		SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new co… CWE-362
Race Condition 		CVE-2020-12050 2024-11-21 13:59 2020-05-1 Show GitHub Exploit DB Packet Storm
211397 4.3 MEDIUM
Network 		xt-commerce xt-commerce The address-management feature in xt:Commerce 5.1 to 6.2.2 allows remote authenticated users to zero out other user's stored addresses by manipulating an id field in the POST request for altering an … CWE-276
Incorrect Default Permissions  		CVE-2020-12101 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
211398 6.1 MEDIUM
Network 		sourcegraph sourcegraph Sourcegraph before 3.15.1 has a vulnerable authentication workflow because of improper validation in the SafeRedirectURL method in cmd/frontend/auth/redirect.go, such as for the //foo//example.com su… CWE-601
Open Redirect 		CVE-2020-12283 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
211399 8.8 HIGH
Network 		teampass teampass TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php newValue directory traversal. CWE-22
Path Traversal 		CVE-2020-12479 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm
211400 7.5 HIGH
Network 		teampass teampass TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files. CWE-306
Missing Authentication for Critical Function 		CVE-2020-12478 2024-11-21 13:59 2020-04-30 Show GitHub Exploit DB Packet Storm