Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226161	7.5	危険	roberto aloi	-	Joomla! 用の Joomla Flickr コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1980	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

226162	2.1	注意	quicksketch	-	Drupal 用の FileField モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1958	2012-12-20 19:29	2010-06-17	Show	GitHub Exploit DB Packet Storm

226163	7.5	危険	thefactory	-	Joomla! 用の Love Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1957	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

226164	7.5	危険	thefactory	-	Joomla! 用の Gadget Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1956	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

226165	7.5	危険	thefactory	-	Joomla! 用の Deluxe blogfactory コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1955	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

226166	10	危険	Standards Based Linux Instrumentation (SBLIM)	-	SBLIM SFCB の httpAdapter におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1937	2012-12-20 19:29	2010-05-14	Show	GitHub Exploit DB Packet Storm

226167	9.3	危険	XnSoft	-	XnView におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1932	2012-12-20 19:29	2010-06-16	Show	GitHub Exploit DB Packet Storm

226168	7.5	危険	rifat kurban	-	tekno.Portal の makale.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1925	2012-12-20 19:29	2010-05-12	Show	GitHub Exploit DB Packet Storm

226169	7.5	危険	phpscripte24	-	Hi Web Wiesbaden Live Shopping Multi Portal System の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1924	2012-12-20 19:29	2010-05-12	Show	GitHub Exploit DB Packet Storm

226170	7.5	危険	phpscripte24	-	Hi Web Wiesbaden Web Social Network Freunde Community System の user.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1923	2012-12-20 19:29	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210871	7.5	HIGH Network	troglobit	uftpd	In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command.	CWE-476 NULL Pointer Dereference	CVE-2020-14149	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210872	7.5	HIGH Network	barton debian fedoraproject	ngircd debian_linux fedora	The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function.	CWE-125 Out-of-bounds Read	CVE-2020-14148	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210873	7.7	HIGH Network	redislabs oracle suse debian	redis communications_operations_monitor linux_enterprise debian_linux	An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (me…	CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound	CVE-2020-14147	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210874	5.3	MEDIUM Network	pcre apple gitlab oracle netapp splunk	pcre macos gitlab communications_cloud_native_core_policy cloud_backup steelstore_cloud_integrated_storage ontap_select_deploy_administration_utility clustered_data_ontap acti…	libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.	CWE-190 Integer Overflow or Wraparound	CVE-2020-14155	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210875	4.8	MEDIUM Network	mutt canonical	mutt ubuntu_linux	Mutt before 1.14.3 proceeds with a connection even if, in response to a GnuTLS certificate prompt, the user rejects an expired intermediate certificate.	NVD-CWE-Other	CVE-2020-14154	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210876	7.1	HIGH Local	ijg	libjpeg	In IJG JPEG (aka libjpeg) from version 8 through 9c, jdhuff.c has an out-of-bounds array read for certain table pointers.	CWE-125 Out-of-bounds Read	CVE-2020-14153	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210877	7.1	HIGH Local	ijg debian	libjpeg debian_linux	In IJG JPEG (aka libjpeg) before 9d, jpeg_mem_available() in jmemnobs.c in djpeg does not honor the max_memory_to_use setting, possibly causing excessive memory consumption.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-14152	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210878	5.5	MEDIUM Local	gnu	bison	GNU Bison before 3.5.4 allows attackers to cause a denial of service (application crash). NOTE: there is a risk only if Bison is used with untrusted input, and an observed bug happens to cause unsafe…	NVD-CWE-noinfo	CVE-2020-14150	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210879	9.8	CRITICAL Network	meetecho	janus	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_get_codec_from_pt in utils.c has a Buffer Overflow via long value in an SDP Offer packet.	CWE-120 Classic Buffer Overflow	CVE-2020-14034	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

210880	9.8	CRITICAL Network	meetecho	janus	An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_streaming_rtsp_parse_sdp in plugins/janus_streaming.c has a Buffer Overflow via a crafted RTSP server.	CWE-120 Classic Buffer Overflow	CVE-2020-14033	2024-11-21 14:02	2020-06-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed