Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228091 9.3 危険 zipgenius - ZipGenius の zqtips.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1597 2012-12-20 19:29 2010-04-29 Show GitHub Exploit DB Packet Storm
228092 6.8 警告 The Support Incident Tracker Project - Support Incident Tracker における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-1596 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228093 4.3 警告 SilverStripe - SilverStripe におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1593 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228094 6.9 警告 SiSoftware - SiSoftware Sandra の Sandra Device Driver におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1592 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228095 7.2 危険 Beijing Rising International Software - Beijing Rising International Rising Antivirus における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1591 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228096 4.3 警告 vpasp - Rocksalt International VP-ASP Shopping Cart の shopsessionsubs.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1590 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228097 5 警告 vpasp - Rocksalt International VP-ASP Shopping Cart の shopsessionsubs.asp におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1589 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228098 7.5 危険 vpasp - Rocksalt International VP-ASP Shopping Cart の shopsessionsubs.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1588 2012-12-20 19:29 2010-04-28 Show GitHub Exploit DB Packet Storm
228099 2.1 注意 Steven Jones - Drupal 用の Context モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1584 2012-12-20 19:29 2010-05-10 Show GitHub Exploit DB Packet Storm
228100 7.5 危険 tirzen
taskfreak		 - TaskFreak! で使用されている Tirzen Framework の tzn_mysql.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1583 2012-12-20 19:29 2010-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207891 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Exposure of File Descriptor to Unintended Control Sphere because rda_interpret uses a privileged pipe that lacks a close-on-exec flag. NVD-CWE-Other
CVE-2020-28012 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207892 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queue_run via two sender options: -R and -S. This may cause privilege escalation from exim to root. CWE-787
 Out-of-bounds Write 		CVE-2020-28011 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207893 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small (on some common platforms). CWE-787
 Out-of-bounds Write 		CVE-2020-28010 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207894 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Integer Overflow to Buffer Overflow because get_stdinput allows unbounded reads that are accompanied by unbounded increases in a certain size variable. NOTE: exploitation … CWE-190
 Integer Overflow or Wraparound 		CVE-2020-28009 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207895 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the spool directory (owned by a non-root user), an attacker can write to a /var/spool/exim4/input s… CWE-269
 Improper Privilege Management 		CVE-2020-28008 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207896 7.8 HIGH
Local 		exim exim Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. Because Exim operates as root in the log directory (owned by a non-root user), a symlink or hard link attack allows overwriting crit… CWE-59
Link Following 		CVE-2020-28007 2024-11-21 14:22 2021-05-6 Show GitHub Exploit DB Packet Storm
207897 5.4 MEDIUM
Network 		online_discussion_forum_project online_discussion_forum The messaging subsystem in the Online Discussion Forum 1.0 is vulnerable to XSS in the message body. An authenticated user can send messages to arbitrary users on the system that include javascript t… CWE-79
Cross-site Scripting 		CVE-2020-28141 2024-11-21 14:22 2021-04-20 Show GitHub Exploit DB Packet Storm
207898 8.1 HIGH
Network 		cosori cs158-af_firmware A unauthenticated backdoor exists in the configuration server functionality of Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to code execution. An attacker… NVD-CWE-Other
CVE-2020-28593 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
207899 9.8 CRITICAL
Network 		cosori cs158-af_firmware A heap-based buffer overflow vulnerability exists in the configuration server functionality of the Cosori Smart 5.8-Quart Air Fryer CS158-AF 1.1.0. A specially crafted JSON object can lead to remote … CWE-787
 Out-of-bounds Write 		CVE-2020-28592 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm
207900 5.4 MEDIUM
Network 		lavalite lavalite Cross Site Scripting (XSS) in LavaLite 5.8.0 via the Address field. CWE-79
Cross-site Scripting 		CVE-2020-28124 2024-11-21 14:22 2021-04-15 Show GitHub Exploit DB Packet Storm