Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249351 | 5 | 警告 | Yaws | - | Yaws におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4181 | 2012-03-27 18:42 | 2010-11-4 | Show | GitHub Exploit DB Packet Storm |
| 249352 | 4 | 警告 | dracut Project kernel.org |
- | dracut におけるローカルユーザの tty0 からターナミルデータを読まれる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-4176 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm |
| 249353 | 3.3 | 注意 | OpenFabrics Alliance | - | libsdp の libsdp.conf のディフォルト設定における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2010-4173 | 2012-03-27 18:42 | 2010-11-22 | Show | GitHub Exploit DB Packet Storm |
| 249354 | 5 | 警告 | OpenTTD | - | OpenTTD におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-4168 | 2012-03-27 18:42 | 2010-11-17 | Show | GitHub Exploit DB Packet Storm |
| 249355 | 7.5 | 危険 | Joomla! | - | Joomla! における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4166 | 2012-03-27 18:42 | 2010-11-4 | Show | GitHub Exploit DB Packet Storm |
| 249356 | 6.9 | 警告 | Mono Project | - | Mono の metadata/loader.c における権限を取得される脆弱性 |
CWE-Other
その他 |
CVE-2010-4159 | 2012-03-27 18:42 | 2010-09-26 | Show | GitHub Exploit DB Packet Storm |
| 249357 | 4.3 | 警告 | exv2 | - | eXV2 CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4155 | 2012-03-27 18:42 | 2010-11-3 | Show | GitHub Exploit DB Packet Storm |
| 249358 | 9.3 | 危険 | rhinosoft | - | Rhino の FTP Voyager におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4154 | 2012-03-27 18:42 | 2010-11-3 | Show | GitHub Exploit DB Packet Storm |
| 249359 | 9.3 | 危険 | crossftp | - | CrossFTP Pro におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4153 | 2012-03-27 18:42 | 2010-11-3 | Show | GitHub Exploit DB Packet Storm |
| 249360 | 7.5 | 危険 | 4site | - | 4site CMS の catalog/index.shtml における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4152 | 2012-03-27 18:42 | 2010-11-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 18, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197781 | 7.5 |
HIGH
Network |
rack_project debian canonical |
rack debian_linux ubuntu_linux |
A reliance on cookies without validation/integrity check security vulnerability exists in rack < 2.2.3, rack < 2.1.4 that makes it is possible for an attacker to forge a secure or host-only cookie pr… |
CWE-20
Improper Input Validation |
CVE-2020-8184 | 2024-11-21 14:38 | 2020-06-20 | Show | GitHub Exploit DB Packet Storm |
| 197782 | 7.5 |
HIGH
Network |
rubyonrails debian opensuse |
rails debian_linux leap backports_sle |
A deserialization of untrusted data vulnerability exists in rails < 5.2.4.3, rails < 6.0.3.1 which can allow an attacker to supply information can be inadvertently leaked fromStrong Parameters. |
CWE-502
Deserialization of Untrusted Data |
CVE-2020-8164 | 2024-11-21 14:38 | 2020-06-20 | Show | GitHub Exploit DB Packet Storm |
| 197783 | 7.5 |
HIGH
Network |
rubyonrails debian |
rails debian_linux |
A client side enforcement of server side security vulnerability exists in rails < 5.2.4.2 and rails < 6.0.3.1 ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be m… |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2020-8162 | 2024-11-21 14:38 | 2020-06-20 | Show | GitHub Exploit DB Packet Storm |
| 197784 | 5.7 |
MEDIUM
Network |
openmicroscopy | omero.web | OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker tricks a user into clicking a malicious link in OMERO.web, … |
CWE-200
Information Exposure |
CVE-2020-7932 | 2024-11-21 14:38 | 2020-06-18 | Show | GitHub Exploit DB Packet Storm |
| 197785 | 6.5 |
MEDIUM
Network |
open-xchange | open-xchange_appsuite | OX App Suite through 7.10.3 allows XXE attacks. |
CWE-611
XXE |
CVE-2020-8541 | 2024-11-21 14:38 | 2020-06-16 | Show | GitHub Exploit DB Packet Storm |
| 197786 | 6.7 |
MEDIUM
Local |
synaptics | smart_audio_uwp | An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associated with the DCHU audio drivers on Lenovo platforms that could allow an ad… |
CWE-428
Unquoted Search Path or Element |
CVE-2020-8337 | 2024-11-21 14:38 | 2020-06-10 | Show | GitHub Exploit DB Packet Storm |
| 197787 | 6.8 |
MEDIUM
Physics |
lenovo |
thinkpad_e14_firmware thinkpad_e15_firmware thinkpad_r14_firmware thinkpad_s3_gen_2_firmware thinkpad_e490s_firmware thinkpad_s3_firmware thinkpad_e490_firmware thinkpad_e590_fir… |
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. |
NVD-CWE-noinfo
|
CVE-2020-8336 | 2024-11-21 14:38 | 2020-06-10 | Show | GitHub Exploit DB Packet Storm |
| 197788 | 6.8 |
MEDIUM
Physics |
lenovo |
thinkpad_t495s_firmware thinkpad_x395_firmware thinkpad_t495_firmware thinkpad_a485_firmware thinkpad_a285_firmware thinkpad_a475_firmware thinkpad_a275_firmware |
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access. |
CWE-754
Improper Check for Unusual or Exceptional Conditions |
CVE-2020-8334 | 2024-11-21 14:38 | 2020-06-10 | Show | GitHub Exploit DB Packet Storm |
| 197789 | 6.7 |
MEDIUM
Local |
lenovo |
330-14ast_firmware 330-15ast_firmware 330-17ast_firmware 340c-15api_firmware 340c-15ast_firmware 720s_touch-15ikb_firmware 720s-15ikb_firmware 730s-13iwl_firmware c640-iml_fir… |
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. |
NVD-CWE-noinfo
|
CVE-2020-8323 | 2024-11-21 14:38 | 2020-06-10 | Show | GitHub Exploit DB Packet Storm |
| 197790 | 6.7 |
MEDIUM
Local |
lenovo |
330-14ast_firmware 330-15ast_firmware 330-17ast_firmware 340c-15api_firmware 340c-15ast_firmware 720s_touch-15ikb_firmware 720s-15ikb_firmware 730s-13iwl_firmware c640-iml_fir… |
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. |
NVD-CWE-noinfo
|
CVE-2020-8322 | 2024-11-21 14:38 | 2020-06-10 | Show | GitHub Exploit DB Packet Storm |