Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 10, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230721	7.5	危険	pumpkin studios	-	Warzone 2100 および Warzone Resurrection におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3849	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230722	2.6	注意	krischan jodies	-	IPCalc 用の CGI wrapper におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3848	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230723	5.1	警告	canebluem	-	MoSpray の admin.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3847	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230724	6.8	警告	Mambo Foundation	-	Mambo 用の MultiBanners における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2006-3846	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230725	9.3	危険	RARLAB	-	WinRAR の lzh.fmt におけるスタックベースのバッファオーバーフローの脆弱性	-	CVE-2006-3845	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230726	6.5	警告	pablosoftwaresolutions	-	Quick 'n Easy FTP Server におけるバッファオーバーフローの脆弱性	-	CVE-2006-3844	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230727	7.5	危険	Mambo Foundation	-	Calendar Mambo Module の com_calendar.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-3843	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230728	4.3	警告	adventnet	-	Zoho Virtual Office におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3842	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230729	2.6	注意	OWASP	-	WebScarab におけるクロスサイトスクリプティングの脆弱性	-	CVE-2006-3841	2012-12-20 18:02	2006-07-25	Show	GitHub Exploit DB Packet Storm

230730	10	危険	eiqnetworks	-	eIQnetworks ESA におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2006-3838	2012-12-20 18:02	2006-07-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211791	6.5	MEDIUM Network	logicaldoc	logicaldoc	LogicalDoc before 8.3.3 allows SQL Injection. LogicalDoc populates the list of available documents by querying the database. This list could be filtered by modifying some of the parameters. Some of t…	CWE-89 SQL Injection	CVE-2020-10365	2024-11-21 13:55	2020-03-19	Show	GitHub Exploit DB Packet Storm

211792	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).	NVD-CWE-Other	CVE-2020-10673	2024-11-21 13:55	2020-03-19	Show	GitHub Exploit DB Packet Storm

211793	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier retail_service_backbone weblogic_server retail_merchandising_sy…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka…	NVD-CWE-Other	CVE-2020-10672	2024-11-21 13:55	2020-03-19	Show	GitHub Exploit DB Packet Storm

211794	6.7	MEDIUM Local	docker	desktop	Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwr…	CWE-59 Link Following	CVE-2020-10665	2024-11-21 13:55	2020-03-19	Show	GitHub Exploit DB Packet Storm

211795	4.3	MEDIUM Network	entrustdatacard	entelligence_security_provider	Entrust Entelligence Security Provider (ESP) before 10.0.60 on Windows mishandles errors during SSL Certificate Validation, leading to situations where (for example) a user continues to interact with…	CWE-295 Improper Certificate Validation	CVE-2020-10659	2024-11-21 13:55	2020-03-18	Show	GitHub Exploit DB Packet Storm

211796	5.4	MEDIUM Network	opencart	opencart	OpenCart 3.0.3.2 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section.	CWE-79 Cross-site Scripting	CVE-2020-10596	2024-11-21 13:55	2020-03-18	Show	GitHub Exploit DB Packet Storm

211797	9.8	CRITICAL Network	r-consortium	rmysql	RMySQL through 0.10.19 allows SQL Injection.	CWE-89 SQL Injection	CVE-2020-10380	2024-11-21 13:55	2020-03-17	Show	GitHub Exploit DB Packet Storm

211798	9.8	CRITICAL Network	joomla	joomla\!	An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype.	CWE-89 SQL Injection	CVE-2020-10243	2024-11-21 13:55	2020-03-17	Show	GitHub Exploit DB Packet Storm

211799	6.1	MEDIUM Network	joomla	joomla\!	An issue was discovered in Joomla! before 3.9.16. Inadequate handling of CSS selectors in the Protostar and Beez3 JavaScript allows XSS attacks.	CWE-79 Cross-site Scripting	CVE-2020-10242	2024-11-21 13:55	2020-03-17	Show	GitHub Exploit DB Packet Storm

211800	8.8	HIGH Network	joomla	joomla\!	An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of com_templates lead to CSRF.	CWE-352 Origin Validation Error	CVE-2020-10241	2024-11-21 13:55	2020-03-17	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed