Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228521	10	危険	Wireshark	-	Wireshark の ASN.1 BER 解析子におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2994	2012-12-20 19:29	2010-08-13	Show	GitHub Exploit DB Packet Storm

228522	5	警告	Wireshark	-	Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2993	2012-12-20 19:29	2010-08-13	Show	GitHub Exploit DB Packet Storm

228523	7.5	危険	rightinpoint	-	RightInPoint Lyrics Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2721	2012-12-20 19:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

228524	7.5	危険	rich kavanagh	-	PsNews における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2716	2012-12-20 19:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

228525	4.3	警告	tcwonline	-	TCW PHP Album の photos/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2715	2012-12-20 19:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

228526	7.5	危険	tcwonline	-	TCW PHP Album の photos/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2714	2012-12-20 19:29	2010-07-13	Show	GitHub Exploit DB Packet Storm

228527	3.5	注意	sijio	-	Sijio Community Software におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2698	2012-12-20 19:29	2010-07-12	Show	GitHub Exploit DB Packet Storm

228528	3.5	注意	sijio	-	Sijio Community Software の gallery/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2697	2012-12-20 19:29	2010-07-12	Show	GitHub Exploit DB Packet Storm

228529	7.5	危険	sijio	-	Sijio Community Software の gallery/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2696	2012-12-20 19:29	2010-07-12	Show	GitHub Exploit DB Packet Storm

228530	6.5	警告	xlightftpd	-	Xlight FTP Server の SFTP/SSH2 仮想サーバにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2695	2012-12-20 19:29	2010-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
216371	7.5	HIGH Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows signature validation bypass via a modified file or a file with non-standard signatures.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-13810	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216372	7.5	HIGH Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via long strings in the content stream.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-13809	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216373	7.5	HIGH Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows resource consumption via crafted cross-reference stream data.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-13808	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216374	7.5	HIGH Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has circular reference mishandling that causes a loop.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-13807	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216375	7.5	HIGH Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has a use-after-free because of JavaScript execution after a deletion or close operation.	CWE-416 Use After Free	CVE-2020-13806	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216376	9.8	CRITICAL Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It has brute-force attack mishandling because the CAS service lacks a limit on login failures.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-13805	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216377	9.8	CRITICAL Network	foxitsoftware	reader phantompdf	An issue was discovered in Foxit Reader and PhantomPDF before 9.7.2. It allows information disclosure of a hardcoded username and password in the DocuSign plugin.	CWE-798 Use of Hard-coded Credentials	CVE-2020-13804	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216378	7.5	HIGH Network	foxitsoftware	phantompdf reader	An issue was discovered in Foxit PhantomPDF Mac and Foxit Reader for Mac before 4.0. It allows signature validation bypass via a modified file or a file with non-standard signatures.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-13803	2024-11-21 14:01	2020-06-5	Show	GitHub Exploit DB Packet Storm

216379	7.5	HIGH Network	zohocorp	manageengine_opmanager	In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed.	CWE-22 Path Traversal	CVE-2020-13818	2024-11-21 14:01	2020-06-4	Show	GitHub Exploit DB Packet Storm

216380	7.4	HIGH Network	ntp netapp opensuse fujitsu	ntp cloud_backup element_software steelstore_cloud_integrated_storage clustered_data_ontap data_ontap solidfire hci_management_node ontap_tools hci_compute_node_firmware	ntpd in ntp before 4.2.8p14 and 4.3.x before 4.3.100 allows remote attackers to cause a denial of service (daemon exit or system time change) by predicting transmit timestamps for use in spoofed pack…	CWE-330 Use of Insufficiently Random Values	CVE-2020-13817	2024-11-21 14:01	2020-06-4	Show	GitHub Exploit DB Packet Storm