Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249411 6.8 警告 ヒューレット・パッカード - HP Insight Control Performance Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-4032 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
249412 8 危険 ヒューレット・パッカード - HP Insight Control Performance Management における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-4031 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
249413 4.3 警告 ヒューレット・パッカード - HP Insight Control Performance Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4030 2012-03-27 18:42 2010-10-28 Show GitHub Exploit DB Packet Storm
249414 7.5 危険 ヒューレット・パッカード - HP Storage Essentials における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-4029 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
249415 7.5 危険 ヒューレット・パッカード - HP LoadRunner の LoadRunner Web Tours におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2010-4028 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
249416 5.6 警告 ヒューレット・パッカード - HP Palm webOS のカメラアプリケーションにおける任意のファイルを上書される脆弱性 CWE-noinfo
情報不足
CVE-2010-4027 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
249417 6.2 警告 ヒューレット・パッカード - HP Palm webOS のサービス API における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2010-4026 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
249418 9.3 危険 ヒューレット・パッカード - HP Palm webOS の Doc Viewer における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4025 2012-03-27 18:42 2010-10-26 Show GitHub Exploit DB Packet Storm
249419 6.8 警告 ヒューレット・パッカード - HP Insight Control Power Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-4024 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249420 4.3 警告 ヒューレット・パッカード - HP Insight Control Power Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4023 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211161 8.1 HIGH
Network
mitel micollab The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A succe… CWE-74
Injection
CVE-2020-13863 2024-11-21 14:02 2020-08-27 Show GitHub Exploit DB Packet Storm
211162 6.1 MEDIUM
Network
codiad codiad ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Site Scripting (XSS) vulnerability was found in Codiad v1.7.8 and later. The vulnerability occurs because of improper sanitization of the folder's na… CWE-79
Cross-site Scripting
CVE-2020-14042 2024-11-21 14:02 2020-08-26 Show GitHub Exploit DB Packet Storm
211163 7.2 HIGH
Network
codiad codiad ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges could use the plugin install feature to… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-14044 2024-11-21 14:02 2020-08-25 Show GitHub Exploit DB Packet Storm
211164 8.8 HIGH
Network
codiad codiad ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Cross Side Request Forgery (CSRF) vulnerability was found in Codiad v1.7.8 and later. The request to download a plugin from the marketplace is only availab… CWE-352
 Origin Validation Error
CVE-2020-14043 2024-11-21 14:02 2020-08-25 Show GitHub Exploit DB Packet Storm
211165 6.5 MEDIUM
Network
dolibarr dolibarr Dolibarr CRM before 11.0.5 allows privilege escalation. This could allow remote authenticated attackers to upload arbitrary files via societe/document.php in which "disabled" is changed to "enabled" … NVD-CWE-noinfo
CVE-2020-14201 2024-11-21 14:02 2020-08-22 Show GitHub Exploit DB Packet Storm
211166 7.5 HIGH
Network
zulip zulip_server Zulip Server before 2.1.5 has Incorrect Access Control because 0198_preregistrationuser_invited_as adds the administrator role to invitations. CWE-269
 Improper Privilege Management
CVE-2020-14215 2024-11-21 14:02 2020-08-21 Show GitHub Exploit DB Packet Storm
211167 5.4 MEDIUM
Network
zulip zulip_server Zulip Server before 2.1.5 allows reverse tabnapping via a topic header link. CWE-269
 Improper Privilege Management
CVE-2020-14194 2024-11-21 14:02 2020-08-21 Show GitHub Exploit DB Packet Storm
211168 7.5 HIGH
Network
apache
debian
shiro
debian_linux
Apache Shiro before 1.6.0, when using Apache Shiro, a specially crafted HTTP request may cause an authentication bypass. NVD-CWE-noinfo
CVE-2020-13933 2024-11-21 14:02 2020-08-18 Show GitHub Exploit DB Packet Storm
211169 8.8 HIGH
Network
apache solr Reported in SOLR-14515 (private) and fixed in SOLR-14561 (public), released in Solr version 8.6.0. The Replication handler (https://lucene.apache.org/solr/guide/8_6/index-replication.html#http-api-co… CWE-20
 Improper Input Validation 
CVE-2020-13941 2024-11-21 14:02 2020-08-17 Show GitHub Exploit DB Packet Storm
211170 4.3 MEDIUM
Network
redhat quay An information disclosure vulnerability was found in Red Hat Quay in versions before 3.3.1. This flaw allows an attacker who can create a build trigger in a repository, to disclose the names of robot… NVD-CWE-noinfo
CVE-2020-14313 2024-11-21 14:02 2020-08-11 Show GitHub Exploit DB Packet Storm