Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227971 6.8 警告 phpf1 - PHP F1 Max の Image Uploader における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-0390 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
227972 5 警告 サン・マイクロシステムズ - Sun Java System Web Server の admin サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0389 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
227973 5 警告 The Tor Project - Tor におけるブリッジ ID などについて重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-0385 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
227974 2.1 注意 The Tor Project - Tor におけるクライアントの ID を特定される脆弱性 CWE-200
情報漏えい 		CVE-2010-0384 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
227975 5 警告 The Tor Project - Tor におけるトラフィックの送信元などの匿名性を侵害される脆弱性 CWE-200
情報漏えい 		CVE-2010-0383 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
227976 7.5 危険 phpmyspace - PHP MySpace の modules/arcade/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0381 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
227977 7.5 危険 phpmyspace - PHP MySpace の modules/arcade/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0377 2012-12-20 19:28 2010-01-21 Show GitHub Exploit DB Packet Storm
227978 3.5 注意 thomas turnbull
roger lopez		 - Drupal 用の Node Blocks モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0370 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
227979 9.3 危険 VideoLAN - VideoLAN VLC Media Player におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0364 2012-12-20 19:28 2010-01-21 Show GitHub Exploit DB Packet Storm
227980 2.6 注意 zeus - Zeus Web Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0363 2012-12-20 19:28 2010-01-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208281 6.5 MEDIUM
Network 		zammad zammad An issue was discovered in Zammad before 3.4.1. There are wrong authorization checks for impersonation requests via X-On-Behalf-Of. The authorization checks are performed for the actual user and not … CWE-863
 Incorrect Authorization 		CVE-2020-26029 2024-11-21 14:19 2020-12-28 Show GitHub Exploit DB Packet Storm
208282 4.9 MEDIUM
Network 		zammad zammad An issue was discovered in Zammad before 3.4.1. Admin Users without a ticket.* permission can access Tickets. CWE-863
 Incorrect Authorization 		CVE-2020-26028 2024-11-21 14:19 2020-12-28 Show GitHub Exploit DB Packet Storm
208283 10.0 CRITICAL
Network 		browserup browserup_proxy BrowserUp Proxy allows you to manipulate HTTP requests and responses, capture HTTP content, and export performance data as a HAR file. BrowserUp Proxy works well as a standalone proxy server, but it … - CVE-2020-26282 2024-11-21 14:19 2020-12-25 Show GitHub Exploit DB Packet Storm
208284 8.5 HIGH
Network 		gohugo hugo Hugo is a fast and Flexible Static Site Generator built in Go. Hugo depends on Go's `os/exec` for certain features, e.g. for rendering of Pandoc documents if these binaries are found in the system `%… CWE-78
OS Command  		CVE-2020-26284 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208285 7.5 HIGH
Network 		rust-lang async-h1 async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates.io). There is a request smuggling vulnerability in async-h1 before version 2.3.0. This vulnerability affects any webserver that uses async… - CVE-2020-26281 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208286 6.1 MEDIUM
Network 		dbdeployer dbdeployer DBdeployer is a tool that deploys MySQL database servers easily. In DBdeployer before version 1.58.2, users unpacking a tarball may use a maliciously packaged tarball that contains symlinks to files … - CVE-2020-26277 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208287 5.3 MEDIUM
Network 		wireshark
oracle 		wireshark
zfs_storage_appliance_kit 		Buffer overflow in QUIC dissector in Wireshark 3.4.0 to 3.4.1 allows denial of service via packet injection or crafted capture file CWE-120
Classic Buffer Overflow 		CVE-2020-26422 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208288 6.1 MEDIUM
Network 		jupyter jupyter_server The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version … - CVE-2020-26275 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208289 7.5 HIGH
Network 		tlslite-ng_project tlslite-ng tlslite-ng is an open source python library that implements SSL and TLS cryptographic protocols. In tlslite-ng before versions 0.7.6 and 0.8.0-alpha39, the code that performs decryption and padding c… - CVE-2020-26263 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm
208290 6.1 MEDIUM
Network 		niftypm nifty-pm Nifty-PM CPE 2.3 is affected by stored HTML injection. The impact is remote arbitrary code execution. CWE-79
Cross-site Scripting 		CVE-2020-26049 2024-11-21 14:19 2020-12-22 Show GitHub Exploit DB Packet Storm