Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228741	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3056	2012-12-20 19:29	2010-08-20	Show	GitHub Exploit DB Packet Storm

228742	7.5	危険	The phpMyAdmin Project	-	phpMyAdmin のコンフィギュレーション設定スクリプトにおける任意の PHP コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3055	2012-12-20 19:29	2010-08-20	Show	GitHub Exploit DB Packet Storm

228743	10	危険	SAP	-	SAP Crystal Reports の ebus-3-3-2-6.dll モジュールにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3032	2012-12-20 19:29	2010-08-17	Show	GitHub Exploit DB Packet Storm

228744	10	危険	ワイズテクノロジー	-	Wyse ThinOS HF におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3031	2012-12-20 19:29	2010-08-17	Show	GitHub Exploit DB Packet Storm

228745	6.8	警告	tomaz-muraus	-	Tomaz Muraus Open Blog におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3030	2012-12-20 19:29	2010-08-17	Show	GitHub Exploit DB Packet Storm

228746	7.5	危険	phpkick	-	PHPKick の statistics.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3029	2012-12-20 19:29	2010-08-16	Show	GitHub Exploit DB Packet Storm

228747	3.6	注意	Simon Phillips	-	Joomla! 用の Aardvertiser コンポーネントにおける特定のファイルを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3028	2012-12-20 19:29	2010-08-16	Show	GitHub Exploit DB Packet Storm

228748	7.5	危険	tycoon	-	Tycoon Baseball Script の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3027	2012-12-20 19:29	2010-08-16	Show	GitHub Exploit DB Packet Storm

228749	5	警告	Wireshark	-	Wireshark の GSM A RR 解析子におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2992	2012-12-20 19:29	2010-06-21	Show	GitHub Exploit DB Packet Storm

228750	9.3	危険	raphael assenat	-	libmikmod の loaders/load_it.c におけるバッファオーバーリードを誘発される脆弱性	CWE-119 バッファエラー	CVE-2010-2971	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
203131	6.5	MEDIUM Network	mongodb	mongodb	A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant in the server selection subsystem. This issue affects MongoD…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2020-7926	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

203132	7.5	HIGH Network	mongodb	mongodb	Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to use a specially crafted request to cause a denial of service…	CWE-20 Improper Input Validation	CVE-2020-7925	2024-11-21 14:38	2020-11-24	Show	GitHub Exploit DB Packet Storm

203133	7.4	HIGH Network	nextcloud	social	Missing validation of server certificates for out-going connections in Nextcloud Social < 0.4.0 allowed a man-in-the-middle attack.	CWE-295 Improper Certificate Validation	CVE-2020-8279	2024-11-21 14:38	2020-11-19	Show	GitHub Exploit DB Packet Storm

203134	5.3	MEDIUM Network	nextcloud	social	Improper access control in Nextcloud Social app version 0.3.1 allowed to read posts of any user.	CWE-863 Incorrect Authorization	CVE-2020-8278	2024-11-21 14:38	2020-11-19	Show	GitHub Exploit DB Packet Storm

203135	7.5	HIGH Network	nodejs fedoraproject oracle c-ares_project	node.js fedora graalvm retail_xstore_point_of_service jd_edwards_enterpriseone_tools mysql_cluster blockchain_platform c-ares	A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the appli…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8277	2024-11-21 14:38	2020-11-19	Show	GitHub Exploit DB Packet Storm

203136	8.8	HIGH Network	citrix	sd-wan	Privilege escalation of an authenticated user to root in Citrix SD-WAN center versions before 11.2.2, 11.1.2b and 10.2.8.	CWE-78 OS Command	CVE-2020-8273	2024-11-21 14:38	2020-11-16	Show	GitHub Exploit DB Packet Storm

203137	7.5	HIGH Network	citrix	sd-wan	Authentication Bypass resulting in exposure of SD-WAN functionality in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8	CWE-287 Improper Authentication	CVE-2020-8272	2024-11-21 14:38	2020-11-16	Show	GitHub Exploit DB Packet Storm

203138	9.8	CRITICAL Network	citrix	sd-wan	Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8	CWE-22 Path Traversal	CVE-2020-8271	2024-11-21 14:38	2020-11-16	Show	GitHub Exploit DB Packet Storm

203139	8.8	HIGH Network	citrix	virtual_apps_and_desktops	An unprivileged Windows user on the VDA or an SMB user can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285871 and CTX285872, 7.15 LTSR CU6 ho…	CWE-78 OS Command	CVE-2020-8270	2024-11-21 14:38	2020-11-16	Show	GitHub Exploit DB Packet Storm

203140	8.8	HIGH Network	citrix	xendesktop xenapp virtual_apps_and_desktops	An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 …	CWE-269 Improper Privilege Management	CVE-2020-8269	2024-11-21 14:38	2020-11-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed