Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 12:10 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249411	8	危険	ヒューレット・パッカード	-	HP Insight Control Performance Management における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4031	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

249412	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Performance Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4030	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

249413	7.5	危険	ヒューレット・パッカード	-	HP Storage Essentials における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4029	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

249414	7.5	危険	ヒューレット・パッカード	-	HP LoadRunner の LoadRunner Web Tours におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-4028	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

249415	5.6	警告	ヒューレット・パッカード	-	HP Palm webOS のカメラアプリケーションにおける任意のファイルを上書される脆弱性	CWE-noinfo 情報不足	CVE-2010-4027	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

249416	6.2	警告	ヒューレット・パッカード	-	HP Palm webOS のサービス API における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4026	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

249417	9.3	危険	ヒューレット・パッカード	-	HP Palm webOS の Doc Viewer における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-4025	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

249418	6.8	警告	ヒューレット・パッカード	-	HP Insight Control Power Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4024	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249419	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Power Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4023	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

249420	6.2	警告	アップル	-	Apple の iOS におけるパスワードロックを回避される脆弱性	CWE-362 競合状態	CVE-2010-4012	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212451	9.8	CRITICAL Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. Privilege escalation can occur via the /ajax/SetUserInfo messages parameter because of the EXECUTE() feature, which is for execu…	CWE-269 Improper Privilege Management	CVE-2020-11708	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212452	8.8	HIGH Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. It doesn't enforce permission over Windows Symlinks or Junctions. As a result, a low-privileged user (non-admin) can craft a Jun…	CWE-863 Incorrect Authorization	CVE-2020-11707	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212453	8.8	HIGH Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Interface allows CSRF for actions such as: Change any username and password, admin ones included; Create/Delete users;…	CWE-352 Origin Validation Error	CVE-2020-11706	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212454	9.8	CRITICAL Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx format or overwrite arbitrary files via the …	CWE-22 Path Traversal	CVE-2020-11705	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212455	6.1	MEDIUM Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The Admin Web Interface has Multiple Stored and Reflected XSS. GetInheritedProperties is Reflected via the groups parameter. Get…	CWE-79 Cross-site Scripting	CVE-2020-11704	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212456	7.5	HIGH Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/GetInheritedProperties allows HTTP Response Splitting via the language parameter.	CWE-74 Injection	CVE-2020-11703	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212457	6.1	MEDIUM Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. The User Web Interface has Multiple Stored and Reflected XSS issues. Collaborate is Reflected via the filename parameter. Collab…	CWE-79 Cross-site Scripting	CVE-2020-11702	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212458	8.8	HIGH Network	provideserver	provide_ftp_server	An issue was discovered in ProVide (formerly zFTPServer) through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting fi…	CWE-352 Origin Validation Error	CVE-2020-11701	2024-11-21 13:58	2020-04-12	Show	GitHub Exploit DB Packet Storm

212459	7.5	HIGH Network	jetbrains	pycharm	In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3.	CWE-312 CWE-522 Cleartext Storage of Sensitive Information Insufficiently Protected Credentials	CVE-2020-11694	2024-11-21 13:58	2020-04-11	Show	GitHub Exploit DB Packet Storm

212460	7.5	HIGH Network	wireshark debian opensuse	wireshark debian_linux leap	In Wireshark 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This was addressed in epan/dissectors/packet-bacapp.c by limiting the amount of recursion.	CWE-674 Uncontrolled Recursion	CVE-2020-11647	2024-11-21 13:58	2020-04-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed