Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229261 4.3 警告 web-site-development - eTek Systems Hit Counter におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0941 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
229262 4.3 警告 sanusart - Simple PHP Guestbook の guestbook.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0940 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
229263 5 警告 visialis - Visialis ABB Forum におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0939 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
229264 4.3 警告 todoomasters - Todoo Forum の todooforum.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0938 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
229265 7.5 危険 visualizationlibrary - Visualization Library における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0937 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
229266 9.3 危険 Canonical - Ubuntu 上で稼動するベースファイルパッケージにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2010-0834 2012-12-20 19:28 2010-08-5 Show GitHub Exploit DB Packet Storm
229267 6.9 警告 Canonical - Ubuntu 上で稼動する PAM の pam_motd における任意のファイルのオーナーシップを変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-0832 2012-12-20 19:28 2010-07-7 Show GitHub Exploit DB Packet Storm
229268 7.5 危険 snowflake - TYPO3 用の T3BLOG エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0798 2012-12-20 19:28 2010-03-2 Show GitHub Exploit DB Packet Storm
229269 4.3 警告 snowflake - TYPO3 用の T3BLOG エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0797 2012-12-20 19:28 2010-03-2 Show GitHub Exploit DB Packet Storm
229270 1.9 注意 thibault godouet - fcrontab の fcron における任意のファイルを読まれる脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-0792 2012-12-20 19:28 2010-03-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202561 8.8 HIGH
Network 		justblab blab\!_ws_pro
blab\!_ax_pro
blab\!_ax
blab\!_ws 		An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to es… CWE-330
 Use of Insufficiently Random Values 		CVE-2020-9449 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
202562 6.1 MEDIUM
Network 		export_users_to_csv_project export_users_to_csv The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-9466 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
202563 9.8 CRITICAL
Network 		eyesofnetwork eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such … CWE-89
SQL Injection 		CVE-2020-9465 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
202564 8.8 HIGH
Network 		centreon centreon Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_rem… CWE-78
OS Command  		CVE-2020-9463 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
202565 6.1 MEDIUM
Network 		gwtupload_project gwtupload There is an XSS (cross-site scripting) vulnerability in GwtUpload 1.0.3 in the file upload functionality. Someone can upload a file with a malicious filename, which contains JavaScript code, which wo… CWE-79
Cross-site Scripting 		CVE-2020-9447 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
202566 7.8 HIGH
Local 		openvpn connect OpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect\drivers\tap\amd64\win10, which allows local users to gain privileges by copying a malicious drvstore.dl… CWE-281
 Improper Preservation of Permissions 		CVE-2020-9442 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
202567 5.5 MEDIUM
Local 		avast antivirus_for_linux
antivirus_pro_plus
antivirus_pro 		The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus Pro, Antivirus Pro Plus, and Antivirus for Linux. CWE-436
 Interpretation Conflict 		CVE-2020-9399 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
202568 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_ip_asc in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9434 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
202569 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_email in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9433 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm
202570 9.1 CRITICAL
Network 		lua-openssl_project lua-openssl openssl_x509_check_host in lua-openssl 0.7.7-1 mishandles X.509 certificate validation because it uses lua_pushboolean for certain non-boolean return values. CWE-295
Improper Certificate Validation  		CVE-2020-9432 2024-11-21 14:40 2020-02-28 Show GitHub Exploit DB Packet Storm