Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250371	5	警告	Netshine Software	-	nBill (com_netinvoice) コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4270	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250372	7.5	危険	Open Dynamics	-	Collabtive の managechat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4269	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250373	7.5	危険	pulseinfotech Joomla!	-	Joomla! 用の Pulse Infotech Flip Wall コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4268	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250374	2.6	注意	レッドハット	-	Red Hat JBoss Enterprise Application Platform の JBoss Remoting におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-4265	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

250375	6.8	警告	Xfig project	-	Xfig におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4262	2012-03-27 18:42	2010-12-17	Show	GitHub Exploit DB Packet Storm

250376	6.8	警告	FontForge project	-	FontForge におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4259	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

250377	6	警告	WordPress.org	-	WordPress の do_trackbacks 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4257	2012-03-27 18:42	2010-11-30	Show	GitHub Exploit DB Packet Storm

250378	7.5	危険	Mono Project Novell	-	Mono における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4254	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250379	4.3	警告	Electric Sheep Fencing	-	pfSense の graph.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4246	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

250380	6.9	警告	IBM	-	IBM OmniFind Enterprise Edition の estaskwrapper における権限を取得される脆弱性	CWE-Other その他	CVE-2010-4236	2012-03-27 18:42	2010-11-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209661	6.1	MEDIUM Network	get-simple	getsimplecms	Cross Site Scripting (XSS) vulnerability in GetSimpleCMS <= 3.3.15 in admin/changedata.php via the redirect_url parameter and the headers_sent function.	CWE-79 Cross-site Scripting	CVE-2020-18657	2024-11-21 14:08	2021-06-24	Show	GitHub Exploit DB Packet Storm

209662	6.1	MEDIUM Network	wuzhicms	wuzhicms	Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".	CWE-79 Cross-site Scripting	CVE-2020-18654	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209663	8.8	HIGH Network	juqingcms	juqingcms	Cross Site Request Forgery (CSRF) in JuQingCMS v1.0 allows remote attackers to gain local privileges via the component "JuQingCMS_v1.0/admin/index.php?c=administrator&a=add".	CWE-352 Origin Validation Error	CVE-2020-18648	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209664	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/nonecms/vendor".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18647	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209665	7.5	HIGH Network	5none	nonecms	Information Disclosure in NoneCMS v1.3 allows remote attackers to obtain sensitive information via the component "/public/index.php".	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-18646	2024-11-21 14:08	2021-06-23	Show	GitHub Exploit DB Packet Storm

209666	3.3	LOW Local	zziplib_project debian fedoraproject	zziplib debian_linux fedora	Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-18442	2024-11-21 14:08	2021-06-19	Show	GitHub Exploit DB Packet Storm

209667	6.1	MEDIUM Network	zblogcn	z-blogphp	Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the "redirect" parameter in the component "zb_system/cmd.php."	CWE-601 Open Redirect	CVE-2020-18268	2024-11-21 14:08	2021-06-8	Show	GitHub Exploit DB Packet Storm

209668	8.8	HIGH Network	simple-log_project	simple-log	Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_add_member".	CWE-352 Origin Validation Error	CVE-2020-18265	2024-11-21 14:08	2021-06-8	Show	GitHub Exploit DB Packet Storm

209669	8.8	HIGH Network	simple-log_project	simple-log	Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component "Simple-Log/admin/admin.php?act=act_edit_member".	CWE-352 Origin Validation Error	CVE-2020-18264	2024-11-21 14:08	2021-06-8	Show	GitHub Exploit DB Packet Storm

209670	8.8	HIGH Network	libjpeg-turbo	libjpeg-turbo	Libjpeg-turbo all version have a stack-based buffer overflow in the "transform" component. A remote attacker can send a malformed jpeg file to the service and cause arbitrary code execution or denial…	CWE-787 Out-of-bounds Write	CVE-2020-17541	2024-11-21 14:08	2021-06-2	Show	GitHub Exploit DB Packet Storm