Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
249561 7.5 危険 fxwebdesign - Joomla! の JRadio (com_jradio) コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4719 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
249562 4.3 警告 lyften - Joomla! 用の Lyftenbloggie コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4718 2012-03-27 18:42 2011-02-1 Show GitHub Exploit DB Packet Storm
249563 6.5 警告 Novell - Novell GroupWise の IMAP サーバコンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4717 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
249564 4.3 警告 Novell - Novell GroupWise の WebPublisher コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4716 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
249565 5 警告 Novell - Novell GroupWise の WebAccess Agent におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4715 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
249566 10 危険 Novell - Novell GroupWise におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4714 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
249567 10 危険 Novell - Novell GroupWise の gwia.exe における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4713 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
249568 10 危険 Novell - Novell GroupWise の gwia.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4712 2012-03-27 18:42 2010-11-4 Show GitHub Exploit DB Packet Storm
249569 7.2 危険 kernel.org - Linux-PAM の pam_env モジュールにおける意図しない環境でプログラムを実行される脆弱性 CWE-DesignError
CVE-2010-4708 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
249570 4.9 警告 kernel.org - Linux-PAM の check_acl 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4707 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210691 8.8 HIGH
Network 		squid-cache
fedoraproject 		squid
fedora 		An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an… CWE-444
HTTP Request Smuggling 		CVE-2020-15049 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
210692 8.8 HIGH
Network 		prestosql presto In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication conf… NVD-CWE-Other
CVE-2020-15087 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
210693 6.1 MEDIUM
Local 		mirumee saleor In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with… - CVE-2020-15085 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
210694 9.1 CRITICAL
Network 		auth0 express-jwt In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, wi… CWE-863
 Incorrect Authorization 		CVE-2020-15084 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
210695 7.8 HIGH
Local 		arswp windows_cleanup_assistant In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input value… CWE-20
 Improper Input Validation  		CVE-2020-14957 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
210696 7.8 HIGH
Local 		arswp windows_cleanup_assistant In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input value… CWE-20
 Improper Input Validation  		CVE-2020-14956 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
210697 9.8 CRITICAL
Network 		sophos xg_firewall_firmware Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was published for all firewalls… CWE-120
Classic Buffer Overflow 		CVE-2020-15069 2024-11-21 14:04 2020-06-30 Show GitHub Exploit DB Packet Storm
210698 6.5 MEDIUM
Network 		iball wrb303n_firmware iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses. CWE-352
 Origin Validation Error 		CVE-2020-15043 2024-11-21 14:04 2020-06-30 Show GitHub Exploit DB Packet Storm
210699 5.5 MEDIUM
Local 		jiangmin jiangmin_antivirus In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values f… CWE-20
 Improper Input Validation  		CVE-2020-14955 2024-11-21 14:04 2020-06-27 Show GitHub Exploit DB Packet Storm
210700 6.1 MEDIUM
Network 		nedi nedi NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in … CWE-79
Cross-site Scripting 		CVE-2020-15017 2024-11-21 14:04 2020-06-26 Show GitHub Exploit DB Packet Storm