Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225971 1.9 注意 シマンテック - Symantec AntiVirus などのオンデマンドスキャンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0106 2012-12-20 19:28 2010-02-17 Show GitHub Exploit DB Packet Storm
225972 6.8 警告 Transmission Project - Transmission の libtransmission/metainfo.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0012 2012-12-20 19:28 2010-01-8 Show GitHub Exploit DB Packet Storm
225973 7.5 危険 uzbl - Uzbl の uzbl-core.c における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0011 2012-12-20 19:28 2010-01-5 Show GitHub Exploit DB Packet Storm
225974 7.5 危険 ViewVC - ViewVC の query.py におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0005 2012-12-20 19:28 2010-01-29 Show GitHub Exploit DB Packet Storm
225975 4.3 警告 SmarterTools Inc. - SmarterTools SmarterTrack の frmTickets.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4995 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
225976 4.3 警告 SmarterTools Inc. - SmarterTools SmarterTrack の frmKBSearch.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4994 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
225977 7.5 危険 script-shop24 - LM Starmail Paidmail の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4993 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
225978 7.5 危険 script-shop24 - LM Starmail Paidmail の paidbanner.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4992 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
225979 10 危険 SAP - SAP Business One の NT_Naming_Service.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4988 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
225980 7.5 危険 scripteen - Scripteen Free Image Hosting Script の admin/header.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-4987 2012-12-20 19:28 2010-08-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212691 9.1 CRITICAL
Network 		styria django-rest-framework-json_web_tokens An issue was discovered in drf-jwt 1.15.x before 1.15.1. It allows attackers with access to a notionally invalidated token to obtain a new, working token via the refresh endpoint, because the blackli… CWE-287
Improper Authentication 		CVE-2020-10594 2024-11-21 13:55 2020-03-16 Show GitHub Exploit DB Packet Storm
212692 7.5 HIGH
Network 		walmart concord An issue was discovered in Walmart Labs Concord before 1.44.0. CORS Access-Control-Allow-Origin headers have a potentially unsafe dependency on Origin headers, and are not configurable. This allows r… NVD-CWE-noinfo
CVE-2020-10591 2024-11-21 13:55 2020-03-16 Show GitHub Exploit DB Packet Storm
212693 7.8 HIGH
Local 		v2rayl_project v2rayl v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is resta… CWE-269
 Improper Privilege Management 		CVE-2020-10589 2024-11-21 13:55 2020-03-16 Show GitHub Exploit DB Packet Storm
212694 7.8 HIGH
Local 		v2rayl_project v2rayl v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo. CWE-269
 Improper Privilege Management 		CVE-2020-10588 2024-11-21 13:55 2020-03-16 Show GitHub Exploit DB Packet Storm
212695 7.8 HIGH
Local 		antixlinux
mxlinux 		antix_linux
mx_linux 		antiX and MX Linux allow local users to achieve root access via "persist-config --command /bin/sh" because of the Sudo configuration. NVD-CWE-noinfo
CVE-2020-10587 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
212696 7.5 HIGH
Network 		q-cms qcms An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. NVD-CWE-noinfo
CVE-2020-10578 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
212697 4.8 MEDIUM
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. janus.c has multiple concurrent threads that misuse the source property of a session, leading to a race condition when claiming sessions. CWE-362
Race Condition 		CVE-2020-10577 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
212698 5.9 MEDIUM
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. plugins/janus_voicemail.c in the VoiceMail plugin has a race condition that could cause a server crash. CWE-362
Race Condition 		CVE-2020-10576 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
212699 4.2 MEDIUM
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. plugins/janus_videocall.c in the VideoCall plugin mishandles session management because a race condition causes some references to be freed too early o… CWE-362
Race Condition 		CVE-2020-10575 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm
212700 9.8 CRITICAL
Network 		meetecho janus An issue was discovered in Janus through 0.9.1. janus.c tries to use a string that doesn't actually exist during a "query_logger" Admin API request, because of a typo in the JSON validation. CWE-706
 Use of Incorrectly-Resolved Name or Reference 		CVE-2020-10574 2024-11-21 13:55 2020-03-15 Show GitHub Exploit DB Packet Storm