Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227641 3.5 注意 sijio - Sijio Community Software の gallery/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2697 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227642 7.5 危険 sijio - Sijio Community Software の gallery/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2696 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227643 6.5 警告 xlightftpd - Xlight FTP Server の SFTP/SSH2 仮想サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2695 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227644 7.5 危険 redcomponent - Joomla! 用の redSHOP コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2694 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227645 7.5 危険 site2nite - Site2Nite Boat Classifieds の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2688 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227646 7.5 危険 site2nite - Site2Nite Boat Classifieds の printdetail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2687 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227647 7.5 危険 topmanage - SAP 用の TopManage OLK モジュール内における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2686 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227648 7.5 危険 Realtyna LLC - Joomla! 用の Realtyna Translator コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-2682 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
227649 4 警告 RSAセキュリティ - RSA enVision におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-2634 2012-12-20 19:29 2010-08-10 Show GitHub Exploit DB Packet Storm
227650 7.5 危険 strongSwan - strongSwan の IKE デーモンにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-2628 2012-12-20 19:29 2010-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208421 7.6 HIGH
Physics 		gnu
redhat
fedoraproject
netapp 		grub2
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_tus
enterprise_linux_server_eus
fedora
ontap_select_deploy_administration_… 		A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If pr… CWE-787
 Out-of-bounds Write 		CVE-2020-25647 2024-11-21 14:18 2021-03-4 Show GitHub Exploit DB Packet Storm
208422 8.2 HIGH
Local 		gnu
redhat
fedoraproject
netapp 		grub2
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux
enterprise_linux_server_tus
enterprise_linux_server_eus
fedora
ontap_select_deploy_administration_… 		A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded lead… CWE-416
 Use After Free 		CVE-2020-25632 2024-11-21 14:18 2021-03-4 Show GitHub Exploit DB Packet Storm
208423 6.1 MEDIUM
Network 		blackboard collaborate_ultra Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the c… CWE-79
Cross-site Scripting 		CVE-2020-25902 2024-11-21 14:18 2021-03-2 Show GitHub Exploit DB Packet Storm
208424 8.8 HIGH
Network 		fontforge fontforge An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allo… - CVE-2020-25690 2024-11-21 14:18 2021-02-23 Show GitHub Exploit DB Packet Storm
208425 5.9 MEDIUM
Network 		agora video_software_development_kit Cleartext transmission of sensitive information in Agora Video SDK prior to 3.1 allows a remote attacker to obtain access to audio and video of any ongoing Agora video call through observation of cle… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-25605 2024-11-21 14:18 2021-02-18 Show GitHub Exploit DB Packet Storm
208426 7.5 HIGH
Network 		oclean oclean Oclean Mobile Application 2.1.2 communicates with an external website using HTTP so it is possible to eavesdrop the network traffic. The content of HTTP payload is encrypted using XOR with a hardcode… CWE-798
CWE-327
 Use of Hard-coded Credentials
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-25493 2024-11-21 14:18 2021-02-12 Show GitHub Exploit DB Packet Storm
208427 7.5 HIGH
Network 		realtek rtl8195a_firmware The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() op… CWE-787
 Out-of-bounds Write 		CVE-2020-25857 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
208428 8.1 HIGH
Network 		realtek rtl8195a_firmware The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operati… CWE-787
 Out-of-bounds Write 		CVE-2020-25856 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
208429 8.1 HIGH
Network 		realtek rtl8195a_firmware The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resul… CWE-787
 Out-of-bounds Write 		CVE-2020-25855 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm
208430 8.1 HIGH
Network 		realtek rtl8195a_firmware The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, r… CWE-787
 Out-of-bounds Write 		CVE-2020-25854 2024-11-21 14:18 2021-02-4 Show GitHub Exploit DB Packet Storm