Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228851 5 警告 Roundcube.net - Roundcube における Web メールユーザのネットワークロケーションを特定される脆弱性 CWE-200
情報漏えい
CVE-2010-0464 2012-12-20 19:28 2010-01-29 Show GitHub Exploit DB Packet Storm
228852 7.5 危険 yoflash - Joomla! 用の Mochigames における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0459 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
228853 4.3 警告 PunBB - PunBB の forum/viewtopic.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-0455 2012-12-20 19:28 2010-01-28 Show GitHub Exploit DB Packet Storm
228854 7.5 危険 SystemTap - SystemTap の stap-server における脆弱性 CWE-noinfo
情報不足
CVE-2010-0412 2012-12-20 19:28 2010-02-24 Show GitHub Exploit DB Packet Storm
228855 7.5 危険 phpgroupware - phpgw における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-0404 2012-12-20 19:28 2010-05-19 Show GitHub Exploit DB Packet Storm
228856 6.8 警告 phpgroupware - phpgw の about.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-0403 2012-12-20 19:28 2010-05-19 Show GitHub Exploit DB Packet Storm
228857 9.3 危険 thegreenbow - TheGreenBow IPSec VPN Client の vpnconf.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-0392 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
228858 6.8 警告 phpf1 - PHP F1 Max の Image Uploader における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2010-0390 2012-12-20 19:28 2010-01-26 Show GitHub Exploit DB Packet Storm
228859 5 警告 サン・マイクロシステムズ - Sun Java System Web Server の admin サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0389 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
228860 5 警告 The Tor Project - Tor におけるブリッジ ID などについて重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-0385 2012-12-20 19:28 2010-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202651 5.4 MEDIUM
Network
liferay liferay_portal In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify… CWE-79
Cross-site Scripting
CVE-2020-7934 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202652 8.8 HIGH
Network
super_file_explorer_project super_file_explorer An arbitrary file upload vulnerability has been discovered in the Super File Explorer app 1.0.1 for iOS. The vulnerability is located in the developer path that is accessible and hidden next to the r… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-7998 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202653 6.1 MEDIUM
Network
asus rt-ac66u_firmware ASUS WRT-AC66U 3 RT 3.0.0.4.372_67 devices allow XSS via the Client Name field to the Parental Control feature. CWE-79
Cross-site Scripting
CVE-2020-7997 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202654 6.1 MEDIUM
Network
typo3 typo3 svg.swf in TYPO3 6.2.0 to 6.2.38 ELTS and 7.0.0 to 7.1.0 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system. This may be at a contrib/… CWE-79
Cross-site Scripting
CVE-2020-8091 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202655 4.8 MEDIUM
Network
a1 wlan_box_adb_vv2220_firmware The Username field in the Storage Service settings of A1 WLAN Box ADB VV2220v2 devices allows stored XSS (after a successful Administrator login). CWE-79
Cross-site Scripting
CVE-2020-8090 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202656 9.8 CRITICAL
Network
usebb usebb panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numeric… NVD-CWE-noinfo
CVE-2020-8088 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202657 9.8 CRITICAL
Network
smc d3g0804w_firmware SMC Networks D3G0804W D3GNV5M-3.5.1.6.10_GA devices allow remote command execution by leveraging access to the Network Diagnostic Tools screen, as demonstrated by an admin login. The attacker must us… CWE-20
 Improper Input Validation 
CVE-2020-8087 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202658 7.8 HIGH
Local
valvesoftware dota_2 rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a cra… NVD-CWE-noinfo
CVE-2020-7952 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202659 7.8 HIGH
Local
valvesoftware dota_2 meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted … CWE-787
 Out-of-bounds Write
CVE-2020-7951 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm
202660 7.8 HIGH
Local
valvesoftware dota_2 meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted … NVD-CWE-noinfo
CVE-2020-7950 2024-11-21 14:38 2020-01-28 Show GitHub Exploit DB Packet Storm