Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227651	7.5	危険	phpscripte24	-	Pay Per Watch & Bid Auktions System の auktion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1855	2012-12-20 19:29	2010-05-7	Show	GitHub Exploit DB Packet Storm

227652	4.3	警告	phpscripte24	-	Pay Per Watch & Bid Auktions System の auktion.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1854	2012-12-20 19:29	2010-05-7	Show	GitHub Exploit DB Packet Storm

227653	6.8	警告	Transmission Project	-	Transmission の libtransmission/magnet.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1853	2012-12-20 19:29	2010-05-7	Show	GitHub Exploit DB Packet Storm

227654	7.5	危険	Webkit	-	Qt などの製品で使用されている WebKit の websockets/WebSocketHandshake.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2010-1766	2012-12-20 19:29	2010-03-22	Show	GitHub Exploit DB Packet Storm

227655	4.3	警告	toolsjx	-	Joomla! 用の Table JX コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1746	2012-12-20 19:29	2010-05-6	Show	GitHub Exploit DB Packet Storm

227656	7.5	危険	satyadeep	-	Scratcher の projects.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1743	2012-12-20 19:29	2010-05-6	Show	GitHub Exploit DB Packet Storm

227657	4.3	警告	satyadeep	-	Scratcher の projects.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1742	2012-12-20 19:29	2010-05-6	Show	GitHub Exploit DB Packet Storm

227658	6.8	警告	Zikula Foundation	-	Zikula Application Framework のユーザモジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-1732	2012-12-20 19:29	2010-04-20	Show	GitHub Exploit DB Packet Storm

227659	4.3	警告	Zikula Foundation	-	Zikula Application Framework におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1724	2012-12-20 19:29	2010-04-20	Show	GitHub Exploit DB Packet Storm

227660	7.5	危険	TheThinkery LLC	-	Joomla! 用の Intellectual Property コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1721	2012-12-20 19:29	2010-05-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215411	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, there is an out-of-bound data read from memory in clear_decompress_subcode_rlex, visualized on screen as color. This has been patched in 2.1.0.	-	CVE-2020-11040	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215412	2.7	LOW Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend (alsa, oss, pulse, ...). The most likely outcome is a cras…	-	CVE-2020-11041	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215413	6.8	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, when using a manipulated server with USB redirection enabled (nearly) arbitrary memory can be read and written due to integer overflows in length checks. This …	-	CVE-2020-11039	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215414	5.4	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, an Integer Overflow to Buffer Overflow exists. When using /video redirection, a manipulated server can instruct the client to allocate a buffer with a smaller …	-	CVE-2020-11038	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215415	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, when running with logger set to "WLOG_TRACE", a possible crash of application could occur due to a read of an invalid array index. Data could be printed as str…	-	CVE-2020-11019	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215416	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, a possible resource exhaustion vulnerability can be performed. Malicious clients could trigger out of bound reads causing memory allocation with random size. T…	-	CVE-2020-11018	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215417	6.5	MEDIUM Network	freerdp opensuse debian	freerdp leap debian_linux	In FreeRDP less than or equal to 2.0.0, by providing manipulated input a malicious client can create a double free condition and crash the server. This is fixed in version 2.1.0.	-	CVE-2020-11017	2024-11-21 13:56	2020-05-30	Show	GitHub Exploit DB Packet Storm

215418	6.1	MEDIUM Network	kaminari_project debian	kaminari debian_linux	In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1.	-	CVE-2020-11082	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm

215419	9.8	CRITICAL Network	node-dns-sync_project	node-dns-sync	node-dns-sync (npm module dns-sync) through 0.2.0 allows execution of arbitrary commands . This issue may lead to remote code execution if a client of the library calls the vulnerable method with unt…	CWE-77 Command Injection	CVE-2020-11079	2024-11-21 13:56	2020-05-29	Show	GitHub Exploit DB Packet Storm

215420	9.9	CRITICAL Network	anchore	engine	In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an ima…	NVD-CWE-Other	CVE-2020-11075	2024-11-21 13:56	2020-05-28	Show	GitHub Exploit DB Packet Storm