Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226371 7.5 危険 flex project - Fast Lexical Analyzer Generator における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0634 2012-12-20 19:28 2010-02-12 Show GitHub Exploit DB Packet Storm
226372 7.5 危険 webguerilla - Joomla! 用の Photoblog コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0610 2012-12-20 19:28 2010-02-11 Show GitHub Exploit DB Packet Storm
226373 4.3 警告 sterlitetechnologies - Sterlite SAM300 AX Router の Forms/status_statistics_1 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0607 2012-12-20 19:28 2010-02-11 Show GitHub Exploit DB Packet Storm
226374 7.5 危険 サン・マイクロシステムズ - Oracle OpenSolaris のデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2010-0559 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
226375 7.5 危険 サン・マイクロシステムズ - Oracle OpenSolaris のデフォルト設定における脆弱性 CWE-16
環境設定 		CVE-2010-0558 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
226376 5 警告 Xerox - Xerox WorkCentre 6400 System Software および Net Controller の Network Controller における "ディレクトリ構造" へアクセスされる脆弱性 CWE-200
情報漏えい 		CVE-2010-0549 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
226377 5 警告 Xerox - Xerox WorkCentre 5632 などにおけるメールボックスへアクセスされる脆弱性 CWE-200
情報漏えい 		CVE-2010-0548 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
226378 4.3 警告 SugarCRM - SugarCRM のオンライン Documents 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0465 2012-12-20 19:28 2010-03-19 Show GitHub Exploit DB Packet Storm
226379 5 警告 Roundcube.net - Roundcube における Web メールユーザのネットワークロケーションを特定される脆弱性 CWE-200
情報漏えい 		CVE-2010-0464 2012-12-20 19:28 2010-01-29 Show GitHub Exploit DB Packet Storm
226380 7.5 危険 yoflash - Joomla! 用の Mochigames における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0459 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213501 7.2 HIGH
Network 		chadhaajay phpkb OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by savin… CWE-78
OS Command  		CVE-2020-10390 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
213502 7.2 HIGH
Network 		chadhaajay phpkb admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when saving global settings. CWE-94
Code Injection 		CVE-2020-10389 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
213503 5.4 MEDIUM
Network 		chadhaajay phpkb The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web script or HTML) in admin/report-… CWE-79
Cross-site Scripting 		CVE-2020-10388 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
213504 4.9 MEDIUM
Network 		chadhaajay phpkb Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter fil… CWE-22
Path Traversal 		CVE-2020-10387 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
213505 7.2 HIGH
Network 		chadhaajay phpkb admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-10386 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
213506 9.8 CRITICAL
Network 		technicolor tc7337net_firmware Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-10376 2024-11-21 13:55 2020-03-11 Show GitHub Exploit DB Packet Storm
213507 5.4 MEDIUM
Network 		ramp altimeter Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI. CWE-79
Cross-site Scripting 		CVE-2020-10372 2024-11-21 13:55 2020-03-11 Show GitHub Exploit DB Packet Storm
213508 9.0 CRITICAL
Network 		samsung
micron
skhynix 		lpddr4
ddr4
ddr4_sdram 		Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known as Target Row Refresh (TRR), aka the TRRespass iss… CWE-20
 Improper Input Validation  		CVE-2020-10255 2024-11-21 13:55 2020-03-11 Show GitHub Exploit DB Packet Storm
213509 5.5 MEDIUM
Local 		imagemagick imagemagick In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the… CWE-125
Out-of-bounds Read 		CVE-2020-10251 2024-11-21 13:55 2020-03-10 Show GitHub Exploit DB Packet Storm
213510 9.8 CRITICAL
Network 		- - The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because … CWE-94
CWE-862
Code Injection
 Missing Authorization 		CVE-2020-10257 2024-11-21 13:55 2020-03-10 Show GitHub Exploit DB Packet Storm