Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249781 5 警告 オラクル - Oracle GlassFish Server における Web Container の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0104 2012-01-23 10:32 2012-01-17 Show GitHub Exploit DB Packet Storm
249782 1.9 注意 オラクル - Oracle Solaris における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0098 2012-01-23 10:25 2012-01-17 Show GitHub Exploit DB Packet Storm
249783 2.1 注意 オラクル - Oracle Solaris における ksh93 シェルの処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0097 2012-01-23 10:16 2012-01-17 Show GitHub Exploit DB Packet Storm
249784 2.6 注意 オラクル - Oracle Solaris における sshd の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0099 2012-01-23 10:13 2012-01-17 Show GitHub Exploit DB Packet Storm
249785 3.6 注意 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0109 2012-01-23 10:09 2012-01-17 Show GitHub Exploit DB Packet Storm
249786 4.9 警告 オラクル - Oracle Solaris における Kernel の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0103 2012-01-23 10:04 2012-01-17 Show GitHub Exploit DB Packet Storm
249787 5 警告 オラクル - Oracle Solaris における Network の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0096 2012-01-23 10:04 2012-01-17 Show GitHub Exploit DB Packet Storm
249788 6.8 警告 オラクル - Oracle Solaris における Kerberos の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0100 2012-01-23 10:03 2012-01-17 Show GitHub Exploit DB Packet Storm
249789 7.8 危険 オラクル - Oracle Solaris における TCP/IP の処理に関する脆弱性 CWE-noinfo
情報不足
CVE-2012-0094 2012-01-23 09:59 2012-01-17 Show GitHub Exploit DB Packet Storm
249790 9.3 危険 7-Technologies - 7-Technologies Interactive Graphical SCADA System における権限を取得される脆弱性 CWE-Other
その他
CVE-2011-4053 2012-01-20 16:50 2012-01-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212241 9.8 CRITICAL
Network
eset nod32_antivirus
smart_security
mobile_security
smart_tv_security
cyber_security
The ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart Security Premium, Internet Security, NOD32 Antiviru… CWE-436
 Interpretation Conflict
CVE-2020-10180 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
212242 7.0 HIGH
Local
timeshift_project
fedoraproject
canonical
timeshift
fedora
ubuntu_linux
init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows symlinks in this location or uses… CWE-362
CWE-59
Race Condition
Link Following
CVE-2020-10174 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
212243 8.8 HIGH
Network
comtrend vr-3033_firmware Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, as demonstrated by shell metac… CWE-78
OS Command 
CVE-2020-10173 2024-11-21 13:54 2020-03-6 Show GitHub Exploit DB Packet Storm
212244 5.4 MEDIUM
Network
phpgurukul daily_expense_tracker_system PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php. CWE-79
Cross-site Scripting
CVE-2020-10107 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
212245 9.8 CRITICAL
Network
phpgurukul daily_expense_tracker_system PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows to dump the MySQL database an… CWE-89
SQL Injection
CVE-2020-10106 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
212246 5.3 MEDIUM
Network
zammad zammad An issue was discovered in Zammad 3.0 through 3.2. It returns source code of static resources when submitting an OPTIONS request, rather than a GET request. Disclosure of source code allows for an at… CWE-552
 Files or Directories Accessible to External Parties
CVE-2020-10105 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
212247 4.3 MEDIUM
Network
zammad zammad An issue was discovered in Zammad 3.0 through 3.2. After authentication, it transmits sensitive information to the user that may be compromised and used by an attacker to gain unauthorized access. Ha… CWE-200
Information Exposure
CVE-2020-10104 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
212248 5.4 MEDIUM
Network
zammad zammad An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the File Upload functionality in Zammad. The malicious JavaScript will execute w… CWE-79
Cross-site Scripting
CVE-2020-10103 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
212249 7.5 HIGH
Network
zammad zammad An issue was discovered in Zammad 3.0 through 3.2. The WebSocket server crashes when messages in non-JSON format are sent by an attacker. The message format is not properly checked and parsing errors… CWE-20
CWE-755
 Improper Input Validation 
 Improper Handling of Exceptional Conditions
CVE-2020-10101 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm
212250 5.4 MEDIUM
Network
zammad zammad An XSS issue was discovered in Zammad 3.0 through 3.2. Malicious code can be provided by a low-privileged user through the Ticket functionality in Zammad. The malicious JavaScript will execute within… CWE-79
Cross-site Scripting
CVE-2020-10099 2024-11-21 13:54 2020-03-5 Show GitHub Exploit DB Packet Storm