Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249951	2.6	注意	amix	-	Skeletonz CMS 1.0 のコメント機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4734	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

249952	4.3	警告	LightNEasy	-	LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4753	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249953	6.8	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4752	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249954	6	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4751	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249955	6.8	警告	blogcms	-	BLOG:CMS の admin/libs/ADMIN.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4750	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

249956	6.8	警告	Zikula Foundation	-	Zikula におけるクロスサイトリクエストフォージェリ攻撃を誘発される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4729	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249957	5	警告	Zikula Foundation	-	Zikula における乱数化をベースにした保護機能を破られる脆弱性	CWE-310 暗号の問題	CVE-2010-4728	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

249958	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4727	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

249959	10	危険	Smarty	-	Smarty の math プラグインにおける詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4726	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

249960	10	危険	Smarty	-	Smarty における詳細不明の脆弱性	CWE-noinfo 情報不足	CVE-2010-4725	2012-03-27 18:42	2011-02-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213821	7.2	HIGH Network	gira	tks-ip-gateway_firmware	Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to authenticated remote code execution via the backup functionality of the web frontend. This can be combined with CVE-2020-10794 for remote root access.	CWE-78 OS Command	CVE-2020-10795	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213822	9.8	CRITICAL Network	gira	tks-ip-gateway_firmware	Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined with CVE-2020-10795 for remote root acce…	CWE-22 Path Traversal	CVE-2020-10794	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213823	5.4	MEDIUM Network	bookstackapp	bookstack	In BookStack greater than or equal to 0.18.0 and less than 0.29.2, there is an XSS vulnerability in comment creation. A user with permission to create comments could POST HTML directly to the system …	CWE-79 Cross-site Scripting	CVE-2020-11055	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213824	3.5	LOW Network	qutebrowser fedoraproject	qutebrowser fedora	In qutebrowser versions less than 1.11.1, reloading a page with certificate errors shows a green URL. After a certificate error was overridden by the user, qutebrowser displays the URL as yellow (col…	-	CVE-2020-11054	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213825	6.1	MEDIUM Network	oauth2_proxy_project	oauth2_proxy	In OAuth2 Proxy before 5.1.1, there is an open redirect vulnerability. Users can provide a redirect address for the proxy to send the authenticated user to at the end of the authentication flow. This…	CWE-601 Open Redirect	CVE-2020-11053	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213826	9.8	CRITICAL Network	sorcery_project	sorcery	In Sorcery before 0.15.0, there is a brute force vulnerability when using password authentication via Sorcery. The brute force protection submodule will prevent a brute force attack for the defined l…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-11052	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213827	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bound read of client memory that is then passed on to the protocol parser. This has been patched in 2.0.0.	-	CVE-2020-11049	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213828	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.0 and before 2.0.0, there is an out-of-bounds read. It only allows to abort a session. No data extraction is possible. This has been fixed in 2.0.0.	-	CVE-2020-11048	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213829	5.9	MEDIUM Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.1 and before 2.0.0, there is an out-of-bounds read in autodetect_recv_bandwidth_measure_results. A malicious server can extract up to 8 bytes of client memory with a manipulated me…	-	CVE-2020-11047	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm

213830	2.2	LOW Network	freerdp canonical debian	freerdp ubuntu_linux debian_linux	In FreeRDP after 1.0 and before 2.0.0, there is a stream out-of-bounds seek in update_read_synchronize that could lead to a later out-of-bounds read.	-	CVE-2020-11046	2024-11-21 13:56	2020-05-8	Show	GitHub Exploit DB Packet Storm