Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246581 7.5 危険 dotnetindex - Professional Download Assistant の admin/login.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5571 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
246582 7.5 危険 Activewebsoftwares - Active eWebquiz の start.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5631 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
246583 7.5 危険 Activewebsoftwares - Active Trade の account.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5627 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
246584 4 警告 dxmsoft - XM Easy Personal FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-5626 2012-06-26 16:03 2008-12-17 Show GitHub Exploit DB Packet Storm
246585 5 警告 aspapps - ASP AutoDealer におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5608 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
246586 5 警告 gazatem technologies - Gazatem QMail Mailing List Manager におけるデータベースファイルをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-5606 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
246587 7.5 危険 aspapps - ASP Portal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-5605 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
246588 6.8 警告 drennansoft - My Simple Forum の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-5604 2012-06-26 16:03 2008-12-16 Show GitHub Exploit DB Packet Storm
246589 6.8 警告 bonzacart - Bonza Cart の admin/ad_settings.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5567 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
246590 6.8 警告 dinkumsoft - DL PayCart の admin/settings.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-5565 2012-06-26 16:03 2008-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219861 4.4 MEDIUM
Local 		theforeman foreman A flaw was found where the Plaintext Candlepin password is disclosed while updating Red Hat Satellite through the satellite-installer. This flaw allows an attacker with sufficiently high privileges, … CWE-522
 Insufficiently Protected Credentials 		CVE-2020-10710 2024-11-21 13:55 2022-08-17 Show GitHub Exploit DB Packet Storm
219862 9.8 CRITICAL
Network 		emerson openenterprise_scada_server Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service. CWE-306
Missing Authentication for Critical Function 		CVE-2020-10640 2024-11-21 13:55 2022-02-25 Show GitHub Exploit DB Packet Storm
219863 7.5 HIGH
Network 		emerson openenterprise_scada_server Inadequate encryption may allow the passwords for Emerson OpenEnterprise versions through 3.3.4 user accounts to be obtained. CWE-326
Inadequate Encryption Strength 		CVE-2020-10636 2024-11-21 13:55 2022-02-25 Show GitHub Exploit DB Packet Storm
219864 4.3 MEDIUM
Network 		kuka sim_pro Simulation models for KUKA.Sim Pro version 3.1 are hosted by a server maintained by KUKA. When these devices request a model, the server transmits the model in plaintext. CWE-924
 Improper Enforcement of Message Integrity During Transmission in a Communication Channel 		CVE-2020-10635 2024-11-21 13:55 2022-02-25 Show GitHub Exploit DB Packet Storm
219865 5.3 MEDIUM
Network 		emerson openenterprise_scada_server Inadequate folder security permissions in Emerson OpenEnterprise versions through 3.3.4 may allow modification of important configuration files, which could cause the system to fail or behave in an u… NVD-CWE-Other
CVE-2020-10632 2024-11-21 13:55 2022-02-25 Show GitHub Exploit DB Packet Storm
219866 8.1 HIGH
Adjacent 		insulet omnipod_insulin_management_system_firmware Insulet Omnipod Insulin Management System insulin pump product ID 19191 and 40160 is designed to communicate using a wireless RF with an Insulet manufactured Personal Diabetes Manager device. This wi… NVD-CWE-Other
CVE-2020-10627 2024-11-21 13:55 2021-12-2 Show GitHub Exploit DB Packet Storm
219867 7.5 HIGH
Network 		replicated replicated_classic Replicated Classic 2.x versions have an improperly secured API that exposes sensitive data from the Replicated Admin Console configuration. An attacker with network access to the Admin Console port (… NVD-CWE-noinfo
CVE-2020-10590 2024-11-21 13:55 2021-07-30 Show GitHub Exploit DB Packet Storm
219868 4.3 MEDIUM
Network 		elastic
redhat 		kibana
openshift_container_platform 		It was discovered that OpenShift Container Platform's (OCP) distribution of Kibana could open in an iframe, which made it possible to intercept and manipulate requests. This flaw allows an attacker t… - CVE-2020-10743 2024-11-21 13:55 2021-06-2 Show GitHub Exploit DB Packet Storm
219869 6.0 MEDIUM
Local 		linux
redhat 		linux_kernel
enterprise_linux 		A flaw was found in the Linux kernel. An index buffer overflow during Direct IO write leading to the NFS client to crash. In some cases, a reach out of the index after one memory allocation by kmallo… CWE-787
 Out-of-bounds Write 		CVE-2020-10742 2024-11-21 13:55 2021-06-2 Show GitHub Exploit DB Packet Storm
219870 9.8 CRITICAL
Network 		sangoma restapps The restapps (aka Rest Phone apps) module for Sangoma FreePBX and PBXact 13, 14, and 15 through 15.0.19.2 allows remote code execution via a URL variable to an AMI command. CWE-77
Command Injection 		CVE-2020-10666 2024-11-21 13:55 2021-05-31 Show GitHub Exploit DB Packet Storm