Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226011 9.3 危険 winfrigate - WinFrigate Frigate 3 FTP クライアントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3097 2012-12-20 19:29 2010-08-20 Show GitHub Exploit DB Packet Storm
226012 9.3 危険 softx - SoftX FTP Client におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3096 2012-12-20 19:29 2010-08-20 Show GitHub Exploit DB Packet Storm
226013 4.3 警告 The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3056 2012-12-20 19:29 2010-08-20 Show GitHub Exploit DB Packet Storm
226014 7.5 危険 The phpMyAdmin Project - phpMyAdmin のコンフィギュレーション設定スクリプトにおける任意の PHP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3055 2012-12-20 19:29 2010-08-20 Show GitHub Exploit DB Packet Storm
226015 10 危険 SAP - SAP Crystal Reports の ebus-3-3-2-6.dll モジュールにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-3032 2012-12-20 19:29 2010-08-17 Show GitHub Exploit DB Packet Storm
226016 10 危険 ワイズテクノロジー - Wyse ThinOS HF におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3031 2012-12-20 19:29 2010-08-17 Show GitHub Exploit DB Packet Storm
226017 6.8 警告 tomaz-muraus - Tomaz Muraus Open Blog におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3030 2012-12-20 19:29 2010-08-17 Show GitHub Exploit DB Packet Storm
226018 7.5 危険 phpkick - PHPKick の statistics.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3029 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
226019 3.6 注意 Simon Phillips - Joomla! 用の Aardvertiser コンポーネントにおける特定のファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3028 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
226020 7.5 危険 tycoon - Tycoon Baseball Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3027 2012-12-20 19:29 2010-08-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213181 7.5 HIGH
Network
grundfos cim_500 Grundfos CIM 500 v06.16.00 stores plaintext credentials, which may allow sensitive information to be read or allow modification to system settings by someone with access to the device. CWE-522
 Insufficiently Protected Credentials
CVE-2020-10609 2024-11-21 13:55 2020-07-28 Show GitHub Exploit DB Packet Storm
213182 4.8 MEDIUM
Network
osisoft pi_vision In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, d… CWE-79
Cross-site Scripting
CVE-2020-10614 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213183 7.5 HIGH
Network
osisoft pi_data_archive In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connecti… CWE-755
 Improper Handling of Exceptional Conditions
CVE-2020-10604 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213184 7.8 HIGH
Local
osisoft pi_buffer_subsystem
pi_api
pi_connector
pi_connector_relay
pi_interface_configuration_utility
pi_integrator
pi_data_collection_manager
pi_data_archive
pi_to_ocs
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at W… CWE-426
 Untrusted Search Path
CVE-2020-10610 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213185 7.8 HIGH
Local
osisoft pi_buffer_subsystem
pi_api
pi_connector
pi_connector_relay
pi_interface_configuration_utility
pi_integrator
pi_data_collection_manager
pi_data_archive
pi_to_ocs
In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local … CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-10608 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213186 5.3 MEDIUM
Network
pi data_archive In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI… CWE-476
 NULL Pointer Dereference
CVE-2020-10602 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213187 7.1 HIGH
Network
osisoft pi_data_archive An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versi… CWE-476
 NULL Pointer Dereference
CVE-2020-10600 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213188 7.8 HIGH
Local
osisoft pi_buffer_subsystem
pi_api
pi_connector
pi_connector_relay
pi_interface_configuration_utility
pi_integrator
pi_data_collection_manager
pi_data_archive
pi_to_ocs
In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information di… CWE-276
Incorrect Default Permissions 
CVE-2020-10606 2024-11-21 13:55 2020-07-25 Show GitHub Exploit DB Packet Storm
213189 7.5 HIGH
Network
grundfos cim_500_firmware Grundfos CIM 500 before v06.16.00 responds to unauthenticated requests for password storage files. CWE-306
Missing Authentication for Critical Function
CVE-2020-10605 2024-11-21 13:55 2020-07-18 Show GitHub Exploit DB Packet Storm
213190 9.8 CRITICAL
Network
abb robotware IRC5 exposes an ftp server (port 21). Upon attempting to gain access you are challenged with a request of username and password, however you can input whatever you like. As long as the field isn't em… CWE-287
Improper Authentication
CVE-2020-10288 2024-11-21 13:55 2020-07-16 Show GitHub Exploit DB Packet Storm