Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228081	4.3	警告	powereasy	-	PowerEasy などの User/User_ChkLogin.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1655	2012-12-20 19:29	2010-05-3	Show	GitHub Exploit DB Packet Storm

228082	5	警告	Samba Project	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-1642	2012-12-20 19:29	2010-05-14	Show	GitHub Exploit DB Packet Storm

228083	4	警告	SquirrelMail Project	-	SquirrelMail の Mail Fetch プラグインにおけるファイアウォール制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1637	2012-12-20 19:29	2010-06-21	Show	GitHub Exploit DB Packet Storm

228084	5	警告	Samba Project	-	Samba の smbd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-1635	2012-12-20 19:29	2010-05-14	Show	GitHub Exploit DB Packet Storm

228085	7.5	危険	phpBB	-	phpBB の posting.php における脆弱性	CWE-noinfo 情報不足	CVE-2010-1630	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

228086	4.3	警告	phpBB	-	phpBB の feed.php におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1627	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

228087	4.3	警告	SAP	-	SAP NetWeaver におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1609	2012-12-20 19:29	2010-04-29	Show	GitHub Exploit DB Packet Storm

228088	7.5	危険	zimbllc	-	Joomla! 用の ZiMB Manager コレクションにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1603	2012-12-20 19:29	2010-04-29	Show	GitHub Exploit DB Packet Storm

228089	7.5	危険	zimbllc	-	Joomla! 用の ZiMB Commen コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1602	2012-12-20 19:29	2010-04-29	Show	GitHub Exploit DB Packet Storm

228090	7.5	危険	thefactory	-	Joomla! 用の Media Mall Factory コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1600	2012-12-20 19:29	2010-04-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202821	7.2	HIGH Network	dlink	dch-m225_firmware	D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name.	CWE-78 OS Command	CVE-2020-6842	2024-11-21 14:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

202822	9.8	CRITICAL Network	dlink	dch-m225_firmware	D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.	CWE-78 OS Command	CVE-2020-6841	2024-11-21 14:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

202823	7.8	HIGH Local	honeywell	inncom_inncontrol_firmware	Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.	CWE-269 Improper Privilege Management	CVE-2020-6968	2024-11-21 14:36	2020-02-21	Show	GitHub Exploit DB Packet Storm

202824	6.8	MEDIUM Physics	ge	vivid_e95_firmware vivid_e90_firmware vivid_s70n_firmware vivid_t8_firmware vivid_t9_firmware vivid_iq_firmware logiq_e10_firmware logiq_e9_firmware logiq_s8_firmware logiq…	A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, res…	CWE-20 NVD-CWE-Other Improper Input Validation	CVE-2020-6977	2024-11-21 14:36	2020-02-21	Show	GitHub Exploit DB Packet Storm

202825	9.8	CRITICAL Network	emerson	openenterprise_scada_server	A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.…	CWE-787 Out-of-bounds Write	CVE-2020-6970	2024-11-21 14:36	2020-02-20	Show	GitHub Exploit DB Packet Storm

202826	6.1	MEDIUM Network	topmanage	olk_webstore	An issue was discovered in TopManage OLK 2020. As there is no ReadOnly on the Session cookie, the user and admin accounts can be taken over in a DOM-Based XSS attack.	CWE-79 Cross-site Scripting	CVE-2020-6845	2024-11-21 14:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

202827	8.8	HIGH Network	topmanage	olk_webstore	In TopManage OLK 2020, login CSRF can be chained with another vulnerability in order to takeover admin and user accounts.	CWE-352 Origin Validation Error	CVE-2020-6844	2024-11-21 14:36	2020-02-19	Show	GitHub Exploit DB Packet Storm

202828	6.1	MEDIUM Network	miniorange	saml_sp_single_sign_on	Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayStat…	CWE-79 Cross-site Scripting	CVE-2020-6850	2024-11-21 14:36	2020-02-18	Show	GitHub Exploit DB Packet Storm

202829	5.5	MEDIUM Local	mcafee	data_exchange_layer	Unquoted service executable path in DXL Broker in McAfee Data eXchange Layer (DXL) Framework 6.0.0 and earlier allows local users to cause a denial of service and malicious file execution via careful…	CWE-428 Unquoted Search Path or Element	CVE-2020-7252	2024-11-21 14:36	2020-02-17	Show	GitHub Exploit DB Packet Storm

202830	5.4	MEDIUM Network	codologic	codoforum	Codologic Codoforum through 4.8.4 allows a DOM-based XSS. While creating a new topic as a normal user, it is possible to add a poll that is automatically loaded in the DOM once the thread/topic is op…	CWE-79 CWE-732 Cross-site Scripting Incorrect Permission Assignment for Critical Resource	CVE-2020-7050	2024-11-21 14:36	2020-02-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed