Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249471 7.5 危険 t-dreams - T-Dreams Cars Ads Package の processview.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4829 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
249472 4.3 警告 SolarWinds - SolarWinds Orion NPM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4828 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
249473 4.3 警告 Snitz - Snitz Forums の members.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4827 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
249474 7.5 危険 Snitz - Snitz Forums の members.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4826 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
249475 4.3 警告 WordPress.org
pleer
- WordPress 用の Twitter Feed プラグイン の magpie_debug.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4825 2012-03-27 18:42 2011-08-24 Show GitHub Exploit DB Packet Storm
249476 7.5 危険 bestsoftinc - BSI Advance Hotel Booking System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4814 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
249477 3.5 注意 Drupal
scheepers de bruin
- Drupal 用の Category Tokens モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4813 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
249478 6.5 警告 6kbbs - 6kbbs における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4812 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
249479 4.3 警告 6kbbs - 6kbbs の ajaxmember.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4811 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
249480 7.5 危険 awcm - AWCM における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4810 2012-03-27 18:42 2011-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213041 9.8 CRITICAL
Network
opsramp gateway OpsRamp Gateway before 7.0.0 has a backdoor account vadmin with the password 9vt@f3Vt that allows root SSH access to the server. This issue has been resolved in OpsRamp Gateway firmware version 7.0.0… CWE-798
 Use of Hard-coded Credentials
CVE-2020-11543 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213042 8.1 HIGH
Network
fasterxml
debian
netapp
oracle
jackson-databind
debian_linux
steelstore_cloud_integrated_storage
active_iq_unified_manager
retail_xstore_point_of_service
primavera_unifier
weblogic_server
retail_merchandising_…
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly). CWE-502
 Deserialization of Untrusted Data
CVE-2020-11620 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213043 8.1 HIGH
Network
fasterxml
debian
netapp
oracle
jackson-databind
debian_linux
steelstore_cloud_integrated_storage
active_iq_unified_manager
retail_xstore_point_of_service
primavera_unifier
weblogic_server
retail_merchandising_…
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop… CWE-502
 Deserialization of Untrusted Data
CVE-2020-11619 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213044 6.1 MEDIUM
Network
wpleadplus wp_lead_plus_x An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-pos… CWE-79
Cross-site Scripting
CVE-2020-11509 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213045 5.4 MEDIUM
Network
wpleadplus wp_lead_plus_x An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbit… CWE-79
Cross-site Scripting
CVE-2020-11508 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213046 7.5 HIGH
Network
netty
debian
fedoraproject
netapp
oracle
netty
debian_linux
fedora
oncommand_workflow_automation
oncommand_insight
oncommand_api_services
webcenter_portal
nosql_database
communications_messaging_server
communicati…
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty serve… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2020-11612 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213047 6.1 MEDIUM
Network
cross_domain_local_storage_project cross_domain_local_storage An issue was discovered in xdLocalStorage through 2.0.5. The buildMessage() function in xdLocalStorage.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() function on the… CWE-601
Open Redirect
CVE-2020-11611 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213048 8.8 HIGH
Network
cross_domain_local_storage_project cross_domain_local_storage An issue was discovered in xdLocalStorage through 2.0.5. The postData() function in xdLocalStoragePostMessageApi.js specifies the wildcard (*) as the targetOrigin when calling the postMessage() funct… CWE-668
 Exposure of Resource to Wrong Sphere
CVE-2020-11610 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213049 4.3 MEDIUM
Physics
linux
canonical
linux_kernel
ubuntu_linux
An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid des… CWE-476
 NULL Pointer Dereference
CVE-2020-11609 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm
213050 7.8 HIGH
Local
nchsoftware express_invoice NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file. CWE-522
 Insufficiently Protected Credentials
CVE-2020-11560 2024-11-21 13:58 2020-04-8 Show GitHub Exploit DB Packet Storm