Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250011 7.5 危険 NetArt Media - NetArtMEDIA WebSiteAdmin の ADMIN/login.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3688 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
250012 5 警告 Alex Kellner
TYPO3 Association		 - TYPO3 の powermail extension における検証を回避される脆弱性 CWE-noinfo
情報不足 		CVE-2010-3687 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250013 2.1 注意 Synology Inc. - Synology Disk Station の FTP 認証モジュールにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-3684 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
250014 7.5 危険 wire plastic design - wpQuiz における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3608 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
250015 4.3 警告 NetArt Media - NetArt MEDIA Real Estate Portal の AGENTS/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3607 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
250016 6.8 警告 NetArt Media - NetArt MEDIA Real Estate Portal の AGENTS/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3606 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
250017 4.3 警告 Alex Kellner
TYPO3 Association		 - TYPO3 の powermail extension におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3605 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250018 7.5 危険 Alex Kellner
TYPO3 Association		 - TYPO3 の powermail extension における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-3604 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
250019 6.8 警告 i7MEDIA, LLC - mojoPortal の ファイルマネージャサービスにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3603 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
250020 4.3 警告 i7MEDIA, LLC - mojoPortal の ProfileView.aspx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3602 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210321 9.8 CRITICAL
Network 		we-com municipality_portal_cms SQL injection can occur in We-com Municipality portal CMS 2.1.x via the cerca/ keywords field. CWE-89
SQL Injection 		CVE-2020-15539 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
210322 6.1 MEDIUM
Network 		we-com municipality_portal_cms XSS can occur in We-com Municipality portal CMS 2.1.x via the cerca/ search bar. CWE-79
Cross-site Scripting 		CVE-2020-15538 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
210323 6.1 MEDIUM
Network 		vanguard_project vanguard An issue was discovered in the Vanguard plugin 2.1 for WordPress. XSS can occur via the mails/new title field, a product field to the p/ URI, or the Products Search box. CWE-79
Cross-site Scripting 		CVE-2020-15537 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
210324 6.1 MEDIUM
Network 		online_hotel_booking_system_project online_hotel_booking_system An issue was discovered in the bestsoftinc Hotel Booking System Pro plugin through 1.1 for WordPress. Persistent XSS can occur via any of the registration fields. CWE-79
Cross-site Scripting 		CVE-2020-15536 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
210325 6.1 MEDIUM
Network 		bestsoftinc car_rental_system An issue was discovered in the bestsoftinc Car Rental System plugin through 1.3 for WordPress. Persistent XSS can occur via any of the registration fields. CWE-79
Cross-site Scripting 		CVE-2020-15535 2024-11-21 14:05 2020-07-6 Show GitHub Exploit DB Packet Storm
210326 7.5 HIGH
Network 		wireshark
opensuse
debian 		wireshark
leap
debian_linux 		In Wireshark 3.2.0 to 3.2.4, the GVCP dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-gvcp.c by ensuring that an offset increases in all situations. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-15466 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
210327 7.8 HIGH
Local 		valvesoftware steam_client An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAM… CWE-362
Race Condition 		CVE-2020-15530 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
210328 7.8 HIGH
Local 		gog galaxy An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak fil… CWE-667
CWE-732
 Improper Locking
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15529 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
210329 7.8 HIGH
Local 		gog galaxy An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity che… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-15528 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm
210330 7.8 HIGH
Local 		python
netapp 		python
snapcenter 		In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native appl… CWE-427
CWE-908
 Uncontrolled Search Path Element
 Use of Uninitialized Resource 		CVE-2020-15523 2024-11-21 14:05 2020-07-5 Show GitHub Exploit DB Packet Storm