Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228241 4.3 警告 webmobo - Webmobo WB News の base/Comments.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1712 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228242 4.3 警告 ramoncastro - Siestta の carga_foto_al.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1711 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228243 6.8 警告 ramoncastro - Siestta の login.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1710 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228244 4.3 警告 Piwigo - Piwigo の register.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1707 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228245 7.5 危険 rocky.nu - Modelbook の casting_view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1705 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228246 7.5 危険 WHMCS Limited - WHMCS の submitticket.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1702 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228247 7.5 危険 rocky.nu - PHP Video Battle Script の browse.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1701 2012-12-20 19:29 2010-05-4 Show GitHub Exploit DB Packet Storm
228248 5 警告 webkul - Joomla! 用の Ultimate Portfolio コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1659 2012-12-20 19:29 2010-05-3 Show GitHub Exploit DB Packet Storm
228249 5 警告 recly - Joomla! 用の SmartSite コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1657 2012-12-20 19:29 2010-05-3 Show GitHub Exploit DB Packet Storm
228250 4.3 警告 powereasy - PowerEasy などの User/User_ChkLogin.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1655 2012-12-20 19:29 2010-05-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207751 9.8 CRITICAL
Network 		nagios fusion Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios. CWE-77
Command Injection 		CVE-2020-28908 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207752 9.8 CRITICAL
Network 		nagios fusion Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to download of an untrusted update package in… CWE-295
Improper Certificate Validation  		CVE-2020-28907 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207753 8.8 HIGH
Network 		nagios fusion
nagios_xi 		Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify files that are included … CWE-276
Incorrect Default Permissions  		CVE-2020-28906 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207754 8.8 HIGH
Network 		nagios fusion Improper Input Validation in Nagios Fusion 4.1.8 and earlier allows an authenticated attacker to execute remote code via table pagination. CWE-94
Code Injection 		CVE-2020-28905 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207755 9.8 CRITICAL
Network 		nagios fusion Execution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation as nagios via installation of a malicious component containing PHP code. CWE-269
 Improper Privilege Management 		CVE-2020-28904 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207756 6.1 MEDIUM
Network 		nagios fusion Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server to inject arbitrary HTML, aka XSS. CWE-79
Cross-site Scripting 		CVE-2020-28903 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207757 9.8 CRITICAL
Network 		nagios fusion Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmd_subsys.php. CWE-77
Command Injection 		CVE-2020-28902 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207758 9.8 CRITICAL
Network 		nagios fusion Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation or Code Execution as root via vectors related to corrupt component installation in cmd_subsys.php. CWE-77
Command Injection 		CVE-2020-28901 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207759 9.8 CRITICAL
Network 		nagios fusion
nagios_xi 		Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to … CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-28900 2024-11-21 14:23 2021-05-24 Show GitHub Exploit DB Packet Storm
207760 6.1 MEDIUM
Network 		projectworlds travel_management_system XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field CWE-79
Cross-site Scripting 		CVE-2020-29205 2024-11-21 14:23 2021-05-18 Show GitHub Exploit DB Packet Storm