Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
245341 4.3 警告 2daybiz - 2daybiz Polls の index_search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1703 2012-06-26 16:19 2010-05-4 Show GitHub Exploit DB Packet Storm
245342 9.3 危険 2brightsparks - 2BrightSparks SyncBack Freeware におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1688 2012-06-26 16:19 2010-05-24 Show GitHub Exploit DB Packet Storm
245343 9.3 危険 internet-soft
abcbackup		 - Urgent Backup などにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1686 2012-06-26 16:19 2010-05-5 Show GitHub Exploit DB Packet Storm
245344 9.3 危険 cursorarts - CursorArts ZipWrangler におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1685 2012-06-26 16:19 2010-05-4 Show GitHub Exploit DB Packet Storm
245345 6.8 警告 dan pascu - Dan Pascu python-cjson におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1666 2012-06-26 16:19 2010-07-2 Show GitHub Exploit DB Packet Storm
245346 7.5 危険 clscript - CLScript Classifieds Script の help-details.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1660 2012-06-26 16:19 2010-05-3 Show GitHub Exploit DB Packet Storm
245347 5 警告 code-garage - Joomla! の Code-Garage noticeboard コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1658 2012-06-26 16:19 2010-05-3 Show GitHub Exploit DB Packet Storm
245348 7.5 危険 airiny - Joomla! 用の Airiny ABC コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1656 2012-06-26 16:19 2010-05-3 Show GitHub Exploit DB Packet Storm
245349 6.5 警告 The Cacti Group - Red Hat HPC Solution などの製品で使用される Cacti における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1645 2012-06-26 16:19 2010-08-23 Show GitHub Exploit DB Packet Storm
245350 4.3 警告 The Cacti Group - Red Hat HPC Solution などの製品で使用される Cacti におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1644 2012-06-26 16:19 2010-08-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220721 9.8 CRITICAL
Network 		hgiga oaklouds_ccm\@il HGiga C&Cmail CCMAILQ before olln-base-6.0-418.i386.rpm and CCMAILN before olln-base-5.0-418.i386.rpm contains insecure configurations. Attackers can exploit these flaws to access unauthorized functi… CWE-78
OS Command  		CVE-2020-10511 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220722 9.8 CRITICAL
Network 		the_school_manage_system_project the_school_manage_system The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Unrestricted file upload (RCE) , that would allow attackers to gain access in the hosting ma… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-10507 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220723 7.5 HIGH
Network 		the_school_manage_system_project the_school_manage_system The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitrary files. CWE-22
Path Traversal 		CVE-2020-10506 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220724 9.8 CRITICAL
Network 		the_school_manage_system_project the_school_manage_system The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of SQL Injection, an attacker can use a union based injection query string to get databases sch… CWE-89
SQL Injection 		CVE-2020-10505 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220725 7.8 HIGH
Local 		mbconnectline mymbconnect24
mbconnect24 		An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root accoun… CWE-269
 Improper Privilege Management 		CVE-2020-10384 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220726 9.8 CRITICAL
Network 		mbconnectline mymbconnect24
mbconnect24 		An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module. NVD-CWE-noinfo
CVE-2020-10383 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220727 8.8 HIGH
Network 		mbconnectline mymbconnect24
mbconnect24 		An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an authenticated remote code execution in the backup-scheduler. NVD-CWE-noinfo
CVE-2020-10382 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220728 5.3 MEDIUM
Network 		mbconnectline mymbconnect24
mbconnect24 		An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated SQL injection in DATA24, allowing attackers to discove… CWE-89
SQL Injection 		CVE-2020-10381 2024-11-21 13:55 2020-04-15 Show GitHub Exploit DB Packet Storm
220729 7.8 HIGH
Local 		fujielectric v-server Fuji Electric V-Server Lite all versions prior to 4.0.9.0 contains a heap based buffer overflow. The buffer allocated to read data, when parsing VPR files, is too small. CWE-787
 Out-of-bounds Write 		CVE-2020-10646 2024-11-21 13:55 2020-04-14 Show GitHub Exploit DB Packet Storm
220730 7.8 HIGH
Local 		rockwellautomation rslinx_classic In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privile… - CVE-2020-10642 2024-11-21 13:55 2020-04-14 Show GitHub Exploit DB Packet Storm