Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249431 9 危険 ヒューレット・パッカード - HP Insight Control Server Migration における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3992 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249432 10 危険 Novell - SUSE Linux Enterprise の supportconfig スクリプトにおける脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-3912 2012-03-27 18:42 2011-01-12 Show GitHub Exploit DB Packet Storm
249433 4.3 警告 ヒューレット・パッカード - HP Insight Control Server Migration におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3991 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249434 5 警告 ヒューレット・パッカード - HP Virtual Server Environment における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-3990 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249435 6.8 警告 ヒューレット・パッカード - HP Insight Control Virtual Machine Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3989 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249436 5 警告 ヒューレット・パッカード - HP Insight Control Virtual Machine Management におけるアクセス制限を回避する脆弱性 CWE-noinfo
情報不足 		CVE-2010-3988 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249437 4.3 警告 ヒューレット・パッカード - HP Insight Control Virtual Machine Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3987 2012-03-27 18:42 2010-10-25 Show GitHub Exploit DB Packet Storm
249438 5 警告 ヒューレット・パッカード - HP VCEM における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足 		CVE-2010-3986 2012-03-27 18:42 2010-10-21 Show GitHub Exploit DB Packet Storm
249439 4.3 警告 ヒューレット・パッカード - HP Operations Orchestration におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3985 2012-03-27 18:42 2010-10-20 Show GitHub Exploit DB Packet Storm
249440 9 危険 SAP - SAP BusinessObjects Enterprise の CmcApp における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3983 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197561 9.8 CRITICAL
Network 		wptimecapsule wp_time_capsule The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of adminis… CWE-287
Improper Authentication 		CVE-2020-8771 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
197562 9.8 CRITICAL
Network 		opservices opmon An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution . CWE-306
Missing Authentication for Critical Function 		CVE-2020-8636 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
197563 5.6 MEDIUM
Network 		libslirp_project
debian
opensuse 		libslirp
debian_linux
leap 		In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. CWE-120
Classic Buffer Overflow 		CVE-2020-8608 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
197564 8.8 HIGH
Network 		bestwebsoft htaccess The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the p… CWE-352
 Origin Validation Error 		CVE-2020-8658 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197565 5.9 MEDIUM
Physics 		linux
opensuse
debian 		linux_kernel
leap
debian_linux 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c. CWE-416
 Use After Free 		CVE-2020-8649 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197566 7.1 HIGH
Local 		linux
debian
opensuse
netapp
broadcom
canonical 		linux_kernel
debian_linux
leap
cloud_backup
active_iq_unified_manager
solidfire_baseboard_management_controller
brocade_fabric_operating_system_firmware
hci_baseboard_management_… 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. CWE-416
 Use After Free 		CVE-2020-8648 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197567 6.1 MEDIUM
Local 		linux
debian
opensuse 		linux_kernel
debian_linux
leap 		There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c. CWE-416
 Use After Free 		CVE-2020-8647 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197568 8.8 HIGH
Network 		lotus_core_cms_project lotus_core_cms Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter. CWE-22
Path Traversal 		CVE-2020-8641 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
197569 5.5 MEDIUM
Local 		canonical
opensuse
debian 		cloud-init
leap
debian_linux 		In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. CWE-521
Weak Password Requirements  		CVE-2020-8632 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm
197570 5.5 MEDIUM
Local 		canonical
opensuse
debian 		cloud-init
leap
debian_linux 		cloud-init through 19.4 relies on Mersenne Twister for a random password, which makes it easier for attackers to predict passwords, because rand_str in cloudinit/util.py calls the random.choice funct… CWE-330
 Use of Insufficiently Random Values 		CVE-2020-8631 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm