Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249451 | 6 | 警告 | Vtiger | - | vtiger CRM の config.template.php における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3909 | 2012-03-27 18:42 | 2010-11-26 | Show | GitHub Exploit DB Packet Storm |
| 249452 | 9.3 | 危険 | VideoLAN | - | VideoLAN VLC Media Player の Real demuxer プラグインにおける整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-3907 | 2012-03-27 18:42 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 249453 | 7.5 | 危険 | Eucalyptus Systems | - | Eucalyptus の管理者のインターフェース のパスワードリセット機能における権限を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-3905 | 2012-03-27 18:42 | 2010-12-16 | Show | GitHub Exploit DB Packet Storm |
| 249454 | 5 | 警告 | infradead | - | OpenConnect におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-3903 | 2012-03-27 18:42 | 2010-10-14 | Show | GitHub Exploit DB Packet Storm |
| 249455 | 5 | 警告 | infradead | - | OpenConnect における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-3902 | 2012-03-27 18:42 | 2010-10-14 | Show | GitHub Exploit DB Packet Storm |
| 249456 | 6.4 | 警告 | infradead | - | OpenConnect における任意の AnyConnect SSL VPN サーバを偽装される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3901 | 2012-03-27 18:42 | 2010-10-14 | Show | GitHub Exploit DB Packet Storm |
| 249457 | 5.8 | 警告 | christian dywan | - | Midori における任意の HTTPS Web サイトになりすまされる脆弱性 |
CWE-Other
その他 |
CVE-2010-3900 | 2012-03-27 18:42 | 2010-10-14 | Show | GitHub Exploit DB Packet Storm |
| 249458 | 5 | 警告 | IBM | - | IBM OmniFind におけるサービス運用妨害 (DoS) 状態となる脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3899 | 2012-03-27 18:42 | 2010-11-12 | Show | GitHub Exploit DB Packet Storm |
| 249459 | 5 | 警告 | IBM | - | IBM OmniFind における認証を回避する脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3898 | 2012-03-27 18:42 | 2010-11-12 | Show | GitHub Exploit DB Packet Storm |
| 249460 | 5 | 警告 | IBM | - | IBM OmniFind の ESSearchApplication/palette.do における重要な情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2010-3897 | 2012-03-27 18:42 | 2010-11-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 17, 2026, 4:15 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 199851 | 8.1 |
HIGH
Network |
f5 |
big-iq_centralized_management big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager… |
On BIG-IP 15.0.0-15.1.0.2, 14.1.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5.1, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, in a High Availability (HA) network failover in Devic… |
CWE-287 CWE-319 Improper Authentication Cleartext Transmission of Sensitive Information |
CVE-2020-5860 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 199852 | 7.8 |
HIGH
Local |
f5 |
big-iq_centralized_management big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager… |
On BIG-IP 15.0.0-15.0.1.2, 14.1.0-14.1.2.2, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1 and BIG-IQ 7.0.0, 6.0.0-6.1.0, and 5.2.0-5.4.0, users with non-administrator roles (for example, Guest … |
NVD-CWE-noinfo
|
CVE-2020-5858 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 199853 | 7.5 |
HIGH
Network |
f5 |
big-ip_access_policy_manager big-ip_advanced_firewall_manager big-ip_analytics big-ip_application_acceleration_manager big-ip_application_security_manager big-ip_domain_name_system … |
On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.2, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, undisclosed HTTP behavior may lead to a denial of service. |
NVD-CWE-noinfo
|
CVE-2020-5857 | 2024-11-21 14:34 | 2020-03-28 | Show | GitHub Exploit DB Packet Storm |
| 199854 | 9.8 |
CRITICAL
Network |
keijiban_tsumiki_project | keijiban_tsumiki | Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CWE-78
OS Command |
CVE-2020-5561 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |
| 199855 | 9.8 |
CRITICAL
Network |
wl-enq_project | wl-enq | WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors. |
CWE-78
OS Command |
CVE-2020-5560 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |
| 199856 | 6.1 |
MEDIUM
Network |
wl-enq_project | wl-enq | Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CWE-79
Cross-site Scripting |
CVE-2020-5559 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |
| 199857 | 8.8 |
HIGH
Network |
cutephp | cutenews | CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. |
CWE-94
Code Injection |
CVE-2020-5558 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |
| 199858 | 6.1 |
MEDIUM
Network |
cutephp | cutenews | Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CWE-79
Cross-site Scripting |
CVE-2020-5557 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |
| 199859 | 9.8 |
CRITICAL
Network |
shihonkanri_plus_goout_project | shihonkanri_plus_goout | Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CWE-78
OS Command |
CVE-2020-5556 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |
| 199860 | 9.1 |
CRITICAL
Network |
shihonkanri_plus_goout_project | shihonkanri_plus_goout | Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper in… |
CWE-20
Improper Input Validation |
CVE-2020-5555 | 2024-11-21 14:34 | 2020-03-25 | Show | GitHub Exploit DB Packet Storm |