Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228331 7.5 危険 Pligg - Pligg の groupadmin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3013 2012-12-20 19:29 2010-08-11 Show GitHub Exploit DB Packet Storm
228332 10 危険 Wireshark - Wireshark の ASN.1 BER 解析子におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-2994 2012-12-20 19:29 2010-08-13 Show GitHub Exploit DB Packet Storm
228333 5 警告 Wireshark - Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2993 2012-12-20 19:29 2010-08-13 Show GitHub Exploit DB Packet Storm
228334 7.5 危険 rightinpoint - RightInPoint Lyrics Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2721 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
228335 7.5 危険 rich kavanagh - PsNews における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2716 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
228336 4.3 警告 tcwonline - TCW PHP Album の photos/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2715 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
228337 7.5 危険 tcwonline - TCW PHP Album の photos/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2714 2012-12-20 19:29 2010-07-13 Show GitHub Exploit DB Packet Storm
228338 3.5 注意 sijio - Sijio Community Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2698 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
228339 3.5 注意 sijio - Sijio Community Software の gallery/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2697 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
228340 7.5 危険 sijio - Sijio Community Software の gallery/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2696 2012-12-20 19:29 2010-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216501 7.8 HIGH
Local 		amd radeon_software Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege, information disclosure or denial of service. CWE-787
 Out-of-bounds Write 		CVE-2020-12895 2024-11-21 14:00 2021-11-16 Show GitHub Exploit DB Packet Storm
216502 7.8 HIGH
Local 		amd radeon_software A potential privilege escalation/denial of service issue exists in the AMD Radeon Kernel Mode driver Escape 0x2000c00 Call handler. An attacker with low privilege could potentially induce a Windows B… NVD-CWE-noinfo
CVE-2020-12964 2024-11-21 14:00 2021-11-16 Show GitHub Exploit DB Packet Storm
216503 5.4 MEDIUM
Network 		fortinet fortianalyzer A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiAnalyzer version 6.0.6 and below, version 6.4.4 allows attacker to execute unauthorized code or… CWE-79
Cross-site Scripting 		CVE-2020-12814 2024-11-21 14:00 2021-11-3 Show GitHub Exploit DB Packet Storm
216504 7.5 HIGH
Network 		3xlogic infinias_eidc32_firmware Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied. CWE-295
Improper Certificate Validation  		CVE-2020-12681 2024-11-21 14:00 2021-07-26 Show GitHub Exploit DB Packet Storm
216505 8.1 HIGH
Adjacent 		depstech wifi_digital_microscope_3_firmware DEPSTECH WiFi Digital Microscope 3 allows remote attackers to change the SSID and password, and demand a ransom payment from the rightful device owner, because there is no way to reset to Factory Def… CWE-862
 Missing Authorization 		CVE-2020-12734 2024-11-21 14:00 2021-07-16 Show GitHub Exploit DB Packet Storm
216506 7.5 HIGH
Network 		depstech wifi_digital_microscope_3_firmware Certain Shenzhen PENGLIXIN components on DEPSTECH WiFi Digital Microscope 3, as used by Shekar Endoscope, allow a TELNET connection with the molinkadmin password for the molink account. CWE-863
 Incorrect Authorization 		CVE-2020-12733 2024-11-21 14:00 2021-07-16 Show GitHub Exploit DB Packet Storm
216507 6.5 MEDIUM
Adjacent 		depstech wifi_digital_microscope_3_firmware DEPSTECH WiFi Digital Microscope 3 has a default SSID of Jetion_xxxxxxxx with a password of 12345678. CWE-1188
 Insecure Default Initialization of Resource 		CVE-2020-12732 2024-11-21 14:00 2021-07-16 Show GitHub Exploit DB Packet Storm
216508 7.5 HIGH
Network 		magicsmotion flamingo_2_firmware The MagicMotion Flamingo 2 application for Android stores data on an sdcard under com.vt.magicmotion/files/Pictures, whence it can be read by other applications. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-12731 2024-11-21 14:00 2021-07-16 Show GitHub Exploit DB Packet Storm
216509 5.3 MEDIUM
Adjacent 		magicsmotion flamingo_2_firmware MagicMotion Flamingo 2 lacks BLE encryption, enabling data sniffing and packet forgery. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-12730 2024-11-21 14:00 2021-07-16 Show GitHub Exploit DB Packet Storm
216510 4.6 MEDIUM
Physics 		magicsmotion flamingo_2_firmware MagicMotion Flamingo 2 has a lack of access control for reading from device descriptors. NVD-CWE-Other
CVE-2020-12729 2024-11-21 14:00 2021-07-16 Show GitHub Exploit DB Packet Storm