Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250071	6.5	警告	bouzouste	-	Primitive CMS の cms_write.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3482	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

250072	6.8	警告	ApPHP	-	ApPHP PHP MicroCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3481	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

250073	4.3	警告	g.rodola	-	pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-3494	2012-03-27 18:42	2009-04-1	Show	GitHub Exploit DB Packet Storm

250074	6.8	警告	ApPHP	-	ApPHP PHP MicroCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3480	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

250075	7.5	危険	boutikone	-	BoutikOne の list.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3479	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

250076	5	警告	OTRS プロジェクト	-	OTRS におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3476	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250077	5.8	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2010-3473	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250078	4.3	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3472	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250079	4.3	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2010-3471	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250080	4.3	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3470	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210291	7.5	HIGH Network	google	android	An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via the KNOX API. The Samsung ID is SVE-2020-17318 (Ju…	NVD-CWE-noinfo	CVE-2020-15579	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210292	5.5	MEDIUM Local	google	android	An issue was discovered on Samsung mobile devices with O(8.x) software. FactoryCamera does not properly restrict runtime permissions. The Samsung ID is SVE-2020-17270 (July 2020).	CWE-276 Incorrect Default Permissions	CVE-2020-15578	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210293	5.5	MEDIUM Local	google	android	An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Cameralyzer allows attackers to write files to the SD card. The Samsung ID is SVE-2020-16830 (July 2020).	NVD-CWE-noinfo	CVE-2020-15577	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210294	7.5	HIGH Network	solarwinds	serv-u	SolarWinds Serv-U File Server before 15.2.1 allows information disclosure via an HTTP response.	NVD-CWE-noinfo	CVE-2020-15576	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210295	6.1	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U File Server before 15.2.1 allows XSS as demonstrated by Tenable Scan, aka Case Number 00484194.	CWE-79 Cross-site Scripting	CVE-2020-15575	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210296	7.5	HIGH Network	solarwinds	serv-u	SolarWinds Serv-U File Server before 15.2.1 mishandles the Same-Site cookie attribute, aka Case Number 00331893.	NVD-CWE-noinfo	CVE-2020-15574	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210297	6.1	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.	CWE-79 Cross-site Scripting	CVE-2020-15573	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210298	5.3	MEDIUM Network	gitlab	gitlab	GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.	NVD-CWE-noinfo	CVE-2020-15525	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210299	5.4	MEDIUM Network	faceted_search_project	faceted_search	The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-15517	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210300	5.4	MEDIUM Network	mm_forum_project	mm_forum	The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2020-15516	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed