Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227621	4.3	警告	SAP	-	SAP NetWeaver の SLD コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2904	2012-12-20 19:29	2010-07-28	Show	GitHub Exploit DB Packet Storm

227622	2.6	注意	runcms	-	RunCMS の modules/headlines/magpierss/scripts/magpie_debug.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2852	2012-12-20 19:29	2010-07-24	Show	GitHub Exploit DB Packet Storm

227623	7.5	危険	schlu.net	-	Joomla! 用の QuickFAQ コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2845	2012-12-20 19:29	2010-07-24	Show	GitHub Exploit DB Packet Storm

227624	5	警告	SquirrelMail Project	-	SquirrelMail の functions/imap_general.php におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2813	2012-12-20 19:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

227625	5	警告	ZNC	-	ZNC の Client.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2812	2012-12-20 19:29	2010-08-3	Show	GitHub Exploit DB Packet Storm

227626	5.7	警告	レッドハット	-	RHEV の VDSM におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2811	2012-12-20 19:29	2010-08-19	Show	GitHub Exploit DB Packet Storm

227627	6.8	警告	uzbl	-	Uzbl のバインディングのデフォルト設定における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2809	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

227628	6.8	警告	Piwik	-	Piwik におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2786	2012-12-20 19:29	2010-07-28	Show	GitHub Exploit DB Packet Storm

227629	2.1	注意	Wim Leers	-	Drupal 用の Hierarchical Select モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2724	2012-12-20 19:29	2010-07-7	Show	GitHub Exploit DB Packet Storm

227630	4.3	警告	rightinpoint	-	RightInPoint Lyrics Script の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2722	2012-12-20 19:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208411	7.8	HIGH Local	dual_dhcp_dns_server_project	dual_dhcp_dns_server	An issue was discovered in Dual DHCP DNS Server 7.40. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the DualServer.exe…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-26133	2024-11-21 14:19	2020-10-29	Show	GitHub Exploit DB Packet Storm

208412	7.8	HIGH Local	home_dns_server_project	home_dns_server	An issue was discovered in Home DNS Server 0.10. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the HomeDNSServer.exe b…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-26132	2024-11-21 14:19	2020-10-29	Show	GitHub Exploit DB Packet Storm

208413	7.8	HIGH Local	open_dhcp_server_project	open_dhcp_server	Issues were discovered in Open DHCP Server (Regular) 1.75 and Open DHCP Server (LDAP Based) 0.1Beta. Due to insufficient access restrictions in the default installation directory, an attacker can ele…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-26131	2024-11-21 14:19	2020-10-29	Show	GitHub Exploit DB Packet Storm

208414	7.8	HIGH Local	open_tftp_server_project	open_tftp_server	Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can ele…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-26130	2024-11-21 14:19	2020-10-29	Show	GitHub Exploit DB Packet Storm

208415	7.5	HIGH Network	sectona	spectra	Sectona Spectra before 3.4.0 has a vulnerable SOAP API endpoint that leaks sensitive information about the configured assets without proper authentication. This could be used by unauthorized parties …	CWE-306 Missing Authentication for Critical Function	CVE-2020-25966	2024-11-21 14:19	2020-10-29	Show	GitHub Exploit DB Packet Storm

208416	6.1	MEDIUM Network	octopus	octopus_deploy	In Octopus Deploy through 2020.4.2, an attacker could redirect users to an external site via a modified HTTP Host header.	CWE-601 Open Redirect	CVE-2020-26161	2024-11-21 14:19	2020-10-27	Show	GitHub Exploit DB Packet Storm

208417	6.5	MEDIUM Network	dell	emc_networker	Dell EMC NetWorker versions prior to 19.3.0.2 contain an improper authorization vulnerability. Certain remote users with low privileges may exploit this vulnerability to perform 'nsrmmdbd' operations…	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-26183	2024-11-21 14:19	2020-10-17	Show	GitHub Exploit DB Packet Storm

208418	6.5	MEDIUM Network	dell	emc_networker	Dell EMC NetWorker versions prior to 19.3.0.2 contain an incorrect privilege assignment vulnerability. A non-LDAP remote user with low privileges may exploit this vulnerability to perform 'saveset' r…	CWE-552 Files or Directories Accessible to External Parties	CVE-2020-26182	2024-11-21 14:19	2020-10-17	Show	GitHub Exploit DB Packet Storm

208419	6.1	MEDIUM Network	xerox	workcentre_ec7836_firmware workcentre_ec7856_firmware	Xerox WorkCentre EC7836 before 073.050.059.25300 and EC7856 before 073.020.059.25300 devices allow XSS via Description pages.	CWE-79 Cross-site Scripting	CVE-2020-26162	2024-11-21 14:19	2020-10-9	Show	GitHub Exploit DB Packet Storm

208420	5.5	MEDIUM Local	kde opensuse	kdeconnect leap backports_sle	In kdeconnect-kde (aka KDE Connect) before 20.08.2, an attacker on the local network could send crafted packets that trigger use of large amounts of CPU, memory, or network connection slots, aka a De…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-26164	2024-11-21 14:19	2020-10-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed