Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228251 4.3 警告 sterlitetechnologies - Sterlite SAM300 AX Router の Forms/status_statistics_1 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0607 2012-12-20 19:28 2010-02-11 Show GitHub Exploit DB Packet Storm
228252 7.5 危険 サン・マイクロシステムズ - Oracle OpenSolaris のデフォルト設定における脆弱性 CWE-16
環境設定
CVE-2010-0559 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
228253 7.5 危険 サン・マイクロシステムズ - Oracle OpenSolaris のデフォルト設定における脆弱性 CWE-16
環境設定
CVE-2010-0558 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
228254 5 警告 Xerox - Xerox WorkCentre 6400 System Software および Net Controller の Network Controller における "ディレクトリ構造" へアクセスされる脆弱性 CWE-200
情報漏えい
CVE-2010-0549 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
228255 5 警告 Xerox - Xerox WorkCentre 5632 などにおけるメールボックスへアクセスされる脆弱性 CWE-200
情報漏えい
CVE-2010-0548 2012-12-20 19:28 2010-01-22 Show GitHub Exploit DB Packet Storm
228256 4.3 警告 SugarCRM - SugarCRM のオンライン Documents 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0465 2012-12-20 19:28 2010-03-19 Show GitHub Exploit DB Packet Storm
228257 5 警告 Roundcube.net - Roundcube における Web メールユーザのネットワークロケーションを特定される脆弱性 CWE-200
情報漏えい
CVE-2010-0464 2012-12-20 19:28 2010-01-29 Show GitHub Exploit DB Packet Storm
228258 7.5 危険 yoflash - Joomla! 用の Mochigames における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0459 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
228259 4.3 警告 PunBB - PunBB の forum/viewtopic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0455 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
228260 7.5 危険 SystemTap - SystemTap の stap-server における脆弱性 CWE-noinfo
情報不足
CVE-2010-0412 2012-12-20 19:28 2010-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207821 9.8 CRITICAL
Network
npos-tesseract_project npos-tesseract This affects all versions of package npos-tesseract. The injection point is located in line 55 in lib/ocr.js. CWE-77
Command Injection
CVE-2020-28453 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207822 9.8 CRITICAL
Network
image-tiler_project image-tiler This affects the package image-tiler before 2.0.2. CWE-77
Command Injection
CVE-2020-28451 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207823 9.8 CRITICAL
Network
heroku-env_project heroku-env This affects all versions of package heroku-env. The injection point is located in lib/get.js which is required by index.js. CWE-77
Command Injection
CVE-2020-28437 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207824 9.8 CRITICAL
Network
gitblame_project gitblame This affects all versions of package gitblame. The injection point is located in line 15 in lib/gitblame.js. CWE-77
Command Injection
CVE-2020-28434 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207825 9.8 CRITICAL
Network
node-latex-pdf_project node-latex-pdf This affects all versions of package node-latex-pdf. CWE-77
Command Injection
CVE-2020-28433 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207826 9.8 CRITICAL
Network
curljs_project curljs This affects all versions of package curljs. CWE-77
Command Injection
CVE-2020-28425 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207827 9.8 CRITICAL
Network
s3-kilatstorage_project s3-kilatstorage This affects all versions of package s3-kilatstorage. CWE-78
OS Command 
CVE-2020-28424 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207828 9.8 CRITICAL
Network
monorepo-build_project monorepo-build This affects all versions of package monorepo-build. CWE-77
Command Injection
CVE-2020-28423 2024-11-21 14:22 2022-08-2 Show GitHub Exploit DB Packet Storm
207829 9.8 CRITICAL
Network
properties-reader_project properties-reader This affects the package properties-reader before 2.2.0. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28471 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm
207830 9.8 CRITICAL
Network
ion-parser_project ion-parser This affects all versions of package ion-parser. If an attacker submits a malicious INI file to an application that parses it with parse , they will pollute the prototype on the application. This can… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-28462 2024-11-21 14:22 2022-07-25 Show GitHub Exploit DB Packet Storm