Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226681 4.3 警告 powereasy - PowerEasy などの User/User_ChkLogin.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1655 2012-12-20 19:29 2010-05-3 Show GitHub Exploit DB Packet Storm
226682 5 警告 Samba Project - Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2010-1642 2012-12-20 19:29 2010-05-14 Show GitHub Exploit DB Packet Storm
226683 4 警告 SquirrelMail Project - SquirrelMail の Mail Fetch プラグインにおけるファイアウォール制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1637 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
226684 5 警告 Samba Project - Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-1635 2012-12-20 19:29 2010-05-14 Show GitHub Exploit DB Packet Storm
226685 7.5 危険 phpBB - phpBB の posting.php における脆弱性 CWE-noinfo
情報不足 		CVE-2010-1630 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
226686 4.3 警告 phpBB - phpBB の feed.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1627 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
226687 4.3 警告 SAP - SAP NetWeaver におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1609 2012-12-20 19:29 2010-04-29 Show GitHub Exploit DB Packet Storm
226688 7.5 危険 zimbllc - Joomla! 用の ZiMB Manager コレクションにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1603 2012-12-20 19:29 2010-04-29 Show GitHub Exploit DB Packet Storm
226689 7.5 危険 zimbllc - Joomla! 用の ZiMB Commen コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1602 2012-12-20 19:29 2010-04-29 Show GitHub Exploit DB Packet Storm
226690 7.5 危険 thefactory - Joomla! 用の Media Mall Factory コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1600 2012-12-20 19:29 2010-04-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209991 6.1 MEDIUM
Network 		typo3 fluid_engine
typo3 		TYPO3 Fluid Engine (package `typo3fluid/fluid`) before versions 2.0.5, 2.1.4, 2.2.1, 2.3.5, 2.4.1, 2.5.5 or 2.6.1 is vulnerable to cross-site scripting when making use of the ternary conditional oper… CWE-79
Cross-site Scripting 		CVE-2020-15241 2024-11-21 14:05 2020-10-9 Show GitHub Exploit DB Packet Storm
209992 6.1 MEDIUM
Network 		vercel next.js Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. … - CVE-2020-15242 2024-11-21 14:05 2020-10-9 Show GitHub Exploit DB Packet Storm
209993 5.9 MEDIUM
Network 		mozilla thunderbird If an attacker intercepts Thunderbird's initial attempt to perform automatic account setup using the Microsoft Exchange autodiscovery mechanism, and the attacker sends a crafted response, then Thunde… NVD-CWE-noinfo
CVE-2020-15646 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209994 6.5 MEDIUM
Network 		smarter smarter_coffee_maker_1st_generation Smarter Coffee Maker before 2nd generation allows firmware replacement without authentication or authorization. User interaction is required to press a button. NOTE: This vulnerability only affects p… NVD-CWE-noinfo
CVE-2020-15501 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209995 5.3 MEDIUM
Network 		glpi-project glpi In GLPI before version 9.5.2, there is a leakage of user information through the public FAQ. The issue was introduced in version 9.5.0 and patched in 9.5.2. As a workaround, disable public access to … - CVE-2020-15217 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209996 8.6 HIGH
Network 		glpi-project glpi In GLPI before version 9.5.2, when supplying a back tick in input that gets put into a SQL query,the application does not escape or sanitize allowing for SQL Injection to occur. Leveraging this vulne… - CVE-2020-15176 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209997 4.3 MEDIUM
Network 		glpi-project glpi In GLPI before version 9.5.2, there is a SQL Injection in the API's search function. Not only is it possible to break the SQL syntax, but it is also possible to utilise a UNION SELECT query to reflec… - CVE-2020-15226 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209998 6.1 MEDIUM
Network 		glpi-project glpi In GLPI before version 9.5.2, the `install/install.php` endpoint insecurely stores user input into the database as `url_base` and `url_base_api`. These settings are referenced throughout the applicat… - CVE-2020-15177 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
209999 9.1 CRITICAL
Network 		glpi-project glpi In GLPI before version 9.5.2, the `?pluginimage.send.php?` endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to instead delete the .htaccess file for… - CVE-2020-15175 2024-11-21 14:05 2020-10-8 Show GitHub Exploit DB Packet Storm
210000 3.5 LOW
Network 		xmpp-http-upload_project xmpp-http-upload In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data` suffix and which are accompanied by a JSON file with the `.meta` suffix. This … - CVE-2020-15239 2024-11-21 14:05 2020-10-7 Show GitHub Exploit DB Packet Storm