Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249261 7.5 危険 gatesoft - GateSoft DocuSafe の ECO.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4736 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
249262 7.5 危険 ecommercemax - Ecommercemax Solutions DGS の shoppingcart.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4735 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
249263 2.6 注意 amix - Skeletonz CMS 1.0 のコメント機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4734 2012-03-27 18:42 2011-02-15 Show GitHub Exploit DB Packet Storm
249264 4.3 警告 LightNEasy - LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4753 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
249265 6.8 警告 LightNEasy - LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4752 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
249266 6 警告 LightNEasy - LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4751 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
249267 6.8 警告 blogcms - BLOG:CMS の admin/libs/ADMIN.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-4750 2012-03-27 18:42 2011-03-1 Show GitHub Exploit DB Packet Storm
249268 6.8 警告 Zikula Foundation - Zikula におけるクロスサイトリクエストフォージェリ攻撃を誘発される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-4729 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
249269 5 警告 Zikula Foundation - Zikula における乱数化をベースにした保護機能を破られる脆弱性 CWE-310
暗号の問題 		CVE-2010-4728 2012-03-27 18:42 2011-02-8 Show GitHub Exploit DB Packet Storm
249270 10 危険 Smarty - Smarty における詳細不明の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-4727 2012-03-27 18:42 2011-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197961 4.8 MEDIUM
Network 		kronos web_time_and_attendance A stored XSS vulnerability in Kronos Web Time and Attendance (webTA) affects 3.8.x and later 3.x versions before 4.0 via multiple input fields (Login Message, Banner Message, and Password Instruction… CWE-79
Cross-site Scripting 		CVE-2020-8493 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197962 5.5 MEDIUM
Local 		bitdefender total_security_2020 A vulnerability in the improper handling of junctions before deletion in Bitdefender Total Security 2020 can allow an attacker to to trigger a denial of service on the affected device. CWE-20
 Improper Input Validation  		CVE-2020-8095 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197963 6.5 MEDIUM
Network 		python
opensuse
canonical
fedoraproject
debian 		python
leap
ubuntu_linux
fedora
debian_linux 		Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression Denial of Service (ReDoS) attacks agains… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8492 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197964 7.8 HIGH
Local 		bitdefender antivirus A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution CWE-74
Injection 		CVE-2020-8093 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197965 5.5 MEDIUM
Local 		bitdefender antivirus A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. Thi… CWE-269
 Improper Privilege Management 		CVE-2020-8092 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
197966 5.5 MEDIUM
Local 		ossec ossec In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a denial of service (NULL pointer dereference) via crafted messages written direc… CWE-476
 NULL Pointer Dereference 		CVE-2020-8448 2024-11-21 14:38 2020-01-30 Show GitHub Exploit DB Packet Storm
197967 9.8 CRITICAL
Network 		ossec ossec In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of syscheck formatted msgs (received from auth… CWE-416
 Use After Free 		CVE-2020-8447 2024-11-21 14:38 2020-01-30 Show GitHub Exploit DB Packet Storm
197968 5.5 MEDIUM
Local 		ossec ossec In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to path traversal (with write access) via crafted syscheck messages written directly… CWE-22
Path Traversal 		CVE-2020-8446 2024-11-21 14:38 2020-01-30 Show GitHub Exploit DB Packet Storm
197969 9.8 CRITICAL
Network 		ossec ossec In OSSEC-HIDS 2.7 through 3.5.0, the OS_CleanMSG function in ossec-analysisd doesn't remove or encode terminal control characters or newlines from processed log messages. In many cases, those charact… CWE-20
 Improper Input Validation  		CVE-2020-8445 2024-11-21 14:38 2020-01-30 Show GitHub Exploit DB Packet Storm
197970 9.8 CRITICAL
Network 		ossec ossec In OSSEC-HIDS 2.7 through 3.5.0, the server component responsible for log analysis (ossec-analysisd) is vulnerable to a use-after-free during processing of ossec-alert formatted msgs (received from a… CWE-416
 Use After Free 		CVE-2020-8444 2024-11-21 14:38 2020-01-30 Show GitHub Exploit DB Packet Storm