Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249271 3.5 注意 dadabik - DaDaBIK におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4355 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249272 5.1 警告 MantisBT Group - MantisBT の admin/upgrade_unattended.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4350 2012-03-27 18:42 2010-12-14 Show GitHub Exploit DB Packet Storm
249273 5 警告 MantisBT Group - MantisBT の admin/upgrade_unattended.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4349 2012-03-27 18:42 2010-12-14 Show GitHub Exploit DB Packet Storm
249274 4.3 警告 MantisBT Group - MantisBT の admin/upgrade_unattended.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4348 2012-03-27 18:42 2010-12-14 Show GitHub Exploit DB Packet Storm
249275 7.1 危険 Linux - Linux kernel の aun_incoming 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4342 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
249276 5 警告 collectd - collectd の cu_rrd_create_file 関数 (src/utils_rrdcreate.c) におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4336 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
249277 7.5 危険 pangramsoft - Pointter PHP Micro-Blogging Social Network における管理者権限を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-4333 2012-03-27 18:42 2010-12-21 Show GitHub Exploit DB Packet Storm
249278 4.3 警告 Seo Panel - Seo Panel におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4331 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
249279 7.5 危険 Novell - Novell iPrint for Linux Open Enterprise Server の opt/novell/iprint/bin/ipsmd におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4328 2012-03-27 18:42 2011-02-9 Show GitHub Exploit DB Packet Storm
249280 5 警告 Novell - Novell eDirectory の NCP サービスにおける脆弱性 CWE-noinfo
情報不足 		CVE-2010-4327 2012-03-27 18:42 2011-02-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211801 7.5 HIGH
Network 		phoenixcontact btp_2043w_firmware
btp_2070w_firmware
btp_2102w_firmware 		Uncontrolled Resource Consumption can be exploited to cause the Phoenix Contact HMIs BTP 2043W, BTP 2070W and BTP 2102W in all versions to become unresponsive and not accurately update the display co… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-12524 2024-11-21 13:59 2020-12-3 Show GitHub Exploit DB Packet Storm
211802 3.3 LOW
Local 		apache cordova We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially craft… NVD-CWE-noinfo
CVE-2020-11990 2024-11-21 13:59 2020-12-2 Show GitHub Exploit DB Packet Storm
211803 5.4 MEDIUM
Network 		intelbras tip200_firmware
tip200lite_firmware
tip300_firmware 		Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS. CWE-79
Cross-site Scripting 		CVE-2020-12262 2024-11-21 13:59 2020-11-27 Show GitHub Exploit DB Packet Storm
211804 6.5 MEDIUM
Adjacent 		linux linux_kernel Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access. CWE-909
 Missing Initialization of Resource 		CVE-2020-12352 2024-11-21 13:59 2020-11-24 Show GitHub Exploit DB Packet Storm
211805 8.8 HIGH
Adjacent 		linux linux_kernel Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CWE-20
 Improper Input Validation  		CVE-2020-12351 2024-11-21 13:59 2020-11-24 Show GitHub Exploit DB Packet Storm
211806 7.3 HIGH
Local 		beckhoff twincat_extended_automation_runtime The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions whic… CWE-276
Incorrect Default Permissions  		CVE-2020-12510 2024-11-21 13:59 2020-11-20 Show GitHub Exploit DB Packet Storm
211807 6.5 MEDIUM
Network 		endress rsg35_firmware
rsg45_firmware
orsg35_firmware
orsg45_firmware 		Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive info… CWE-200
Information Exposure 		CVE-2020-12496 2024-11-21 13:59 2020-11-20 Show GitHub Exploit DB Packet Storm
211808 8.8 HIGH
Network 		endress rsg35_firmware
rsg45_firmware
orsg35_firmware
orsg45_firmware 		Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface w… CWE-269
 Improper Privilege Management 		CVE-2020-12495 2024-11-21 13:59 2020-11-20 Show GitHub Exploit DB Packet Storm
211809 7.5 HIGH
Network 		symantec endpoint_detection_and_response Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data. NVD-CWE-noinfo
CVE-2020-12593 2024-11-21 13:59 2020-11-19 Show GitHub Exploit DB Packet Storm
211810 9.8 CRITICAL
Network 		intel open_webrtc_toolkit Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access. NVD-CWE-Other
CVE-2020-12338 2024-11-21 13:59 2020-11-14 Show GitHub Exploit DB Packet Storm