Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249481 2.6 注意 レッドハット - Red Hat JBoss Enterprise Application Platform および JBoss Enterprise Web Platform の Boss Remoting におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-3862 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
249482 6.4 警告 レッドハット - Red Hat Conga の Luciにおける repoze.who 認証をバイパスすることが容易になる脆弱性 CWE-287
不適切な認証 		CVE-2010-3852 2012-03-27 18:42 2010-11-2 Show GitHub Exploit DB Packet Storm
249483 4.9 警告 Linux - Linux kernel の ec_dev_ioctl 関数におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3850 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
249484 4.7 警告 Linux - Linux kernel の econet_sendmsg におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2010-3849 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
249485 6.9 警告 Linux - Linux kernel の econet_sendmsg 関数におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3848 2012-03-27 18:42 2010-12-30 Show GitHub Exploit DB Packet Storm
249486 5.8 警告 Haxx - curl における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3842 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
249487 4.3 警告 TWiki - TWiki の lib/TWiki.pm における クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3841 2012-03-27 18:42 2010-10-18 Show GitHub Exploit DB Packet Storm
249488 6 警告 PostgreSQL.org
Alvaro Herrera		 - PostgreSQL の PL/php アドオンにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3781 2012-03-27 18:42 2010-10-6 Show GitHub Exploit DB Packet Storm
249489 5 警告 Mozilla Foundation - Bugzilla の Old Charts 実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3764 2012-03-27 18:42 2010-11-5 Show GitHub Exploit DB Packet Storm
249490 4.3 警告 MantisBT Group - MantisBT の core/summary_api.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3763 2012-03-27 18:42 2010-08-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212721 7.5 HIGH
Network 		deskpro deskpro An issue was discovered in Deskpro before 2019.8.0. The /api/email_accounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all help… CWE-862
 Missing Authorization 		CVE-2020-11463 2024-11-21 13:57 2020-04-2 Show GitHub Exploit DB Packet Storm
212722 5.4 MEDIUM
Network 		netgate pfsense pfSense before 2.4.5 has stored XSS in system_usermanager_addprivs.php in the WebGUI via the descr parameter (aka full name) of a user. CWE-79
Cross-site Scripting 		CVE-2020-11457 2024-11-21 13:57 2020-04-2 Show GitHub Exploit DB Packet Storm
212723 5.4 MEDIUM
Network 		limesurvey limesurvey LimeSurvey before 4.1.12+200324 has stored XSS in application/views/admin/surveysgroups/surveySettings.php and application/models/SurveysGroups.php (aka survey groups). CWE-79
Cross-site Scripting 		CVE-2020-11456 2024-11-21 13:57 2020-04-2 Show GitHub Exploit DB Packet Storm
212724 9.8 CRITICAL
Network 		limesurvey limesurvey LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. CWE-22
Path Traversal 		CVE-2020-11455 2024-11-21 13:57 2020-04-2 Show GitHub Exploit DB Packet Storm
212725 7.5 HIGH
Network 		technicolor tc7337_firmware An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf. CWE-522
 Insufficiently Protected Credentials 		CVE-2020-11449 2024-11-21 13:57 2020-04-2 Show GitHub Exploit DB Packet Storm
212726 5.3 MEDIUM
Network 		tp-link nc450_firmware
nc260_firmware
nc250_firmware
nc230_firmware
nc220_firmware
nc210_firmware
nc200_firmware
kc300s2_firmware
kc310s2_firmware
kc200_firmware
tapo_c200_firmw… 		TP-Link cloud cameras through 2020-02-09 allow remote attackers to bypass authentication and obtain sensitive information via vectors involving a Wi-Fi session with GPS enabled, aka CNVD-2020-04855. NVD-CWE-noinfo
CVE-2020-11445 2024-11-21 13:57 2020-04-1 Show GitHub Exploit DB Packet Storm
212727 6.1 MEDIUM
Network 		phpmyadmin phpmyadmin phpMyAdmin 5.0.2 allows CRLF injection, as demonstrated by %0D%0Astring%0D%0A inputs to login form fields causing CRLF sequences to be reflected on an error page. NOTE: the vendor states "I don't see… CWE-74
Injection 		CVE-2020-11441 2024-11-21 13:57 2020-04-1 Show GitHub Exploit DB Packet Storm
212728 7.5 HIGH
Network 		telerik ui_for_silverlight An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request that provides the file location of the … CWE-22
Path Traversal 		CVE-2020-11414 2024-11-21 13:57 2020-03-31 Show GitHub Exploit DB Packet Storm
212729 7.8 HIGH
Local 		psappdeploytoolkit powershell_app_deployment_toolkit In PowerShell App Deployment Toolkit (aka PSAppDeployToolkit) through 3.8.0, an incorrect access control vulnerability in the default configuration may allow an authenticated user to potentially enab… NVD-CWE-Other
CVE-2020-10962 2024-11-21 13:56 2023-08-1 Show GitHub Exploit DB Packet Storm
212730 9.8 CRITICAL
Network 		sierrawireless airlink_mobility_manager Sierra Wireless AirLink Mobility Manager (AMM) before 2.17 mishandles sessions and thus an unauthenticated attacker can obtain a login session with administrator privileges. NVD-CWE-noinfo
CVE-2020-11101 2024-11-21 13:56 2022-12-27 Show GitHub Exploit DB Packet Storm