Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250401 6.5 警告 Foswiki - Foswiki の UI/Manage.pm における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4215 2012-03-27 18:42 2010-11-12 Show GitHub Exploit DB Packet Storm
250402 4.3 警告 wellsfargo - Android 用の Wells Fargo Mobile アプリケーションにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-4214 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
250403 4.3 警告 bankofamerica - Android のバンク・オブ・アメリカのアプリケーションにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2010-4213 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
250404 1.9 注意 USAA - USAA application for Android における重要なオンラインバンキングの情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4212 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
250405 2.9 注意 ebay - PayPal app における Paypal Web サーバになりすまされる脆弱性 CWE-287
不適切な認証 		CVE-2010-4211 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
250406 7.2 危険 FreeBSD - FreeBSD の pfs_getextattr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4210 2012-03-27 18:42 2010-11-10 Show GitHub Exploit DB Packet Storm
250407 4.3 警告 Mozilla Foundation
Yahoo!		 - Bugzilla で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4209 2012-03-27 18:42 2010-11-7 Show GitHub Exploit DB Packet Storm
250408 4.3 警告 Moodle
Yahoo!
Mozilla Foundation		 - Bugzilla などの製品で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4208 2012-03-27 18:42 2010-11-7 Show GitHub Exploit DB Packet Storm
250409 4.9 警告 Linux - Linux kernel の net/rds/rdma.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4175 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
250410 7.8 危険 Linux - Linux kernel の x25_parse_facilities 関数における整数アンダーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4164 2012-03-27 18:42 2011-01-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209611 8.8 HIGH
Network 		metinfo metinfo Cross Site Request Forgery (CSRF) vulnerability in MetInfo 6.1.3 via a doaddsave action in admin/index.php. CWE-352
 Origin Validation Error 		CVE-2020-18157 2024-11-21 14:08 2021-07-30 Show GitHub Exploit DB Packet Storm
209612 9.8 CRITICAL
Network 		whatsns whatsns SQL Injextion vulnerability exists in Whatsns 4.0 via the ip parameter in index.php?admin_banned/add.htm. CWE-89
SQL Injection 		CVE-2020-18013 2024-11-21 14:08 2021-07-30 Show GitHub Exploit DB Packet Storm
209613 7.5 HIGH
Network 		tinyexr_project tinyexr tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS). CWE-129
 Improper Validation of Array Index 		CVE-2020-18430 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209614 7.5 HIGH
Network 		tinyexr_project tinyexr tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS). CWE-129
 Improper Validation of Array Index 		CVE-2020-18428 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209615 9.8 CRITICAL
Network 		autohotkey autohotkey A process injection vulnerability in setup.exe of AutoHotkey 1.1.32.00 allows attackers to escalate privileges. NVD-CWE-noinfo
CVE-2020-18174 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209616 7.8 HIGH
Local 		1password 1password A DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute arbitrary code. CWE-427
 Uncontrolled Search Path Element 		CVE-2020-18173 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209617 9.8 CRITICAL
Network 		trezor bridge A code injection vulnerability in the SeDebugPrivilege component of Trezor Bridge 2.0.27 allows attackers to escalate privileges. CWE-94
Code Injection 		CVE-2020-18172 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209618 8.8 HIGH
Local 		techsmith snagit TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. NOTE: This implies that Snagit's use o… CWE-269
 Improper Privilege Management 		CVE-2020-18171 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209619 9.8 CRITICAL
Network 		abloy key_manager An issue in the SeChangeNotifyPrivilege component of Abloy Key Manager Version 7.14301.0.0 allows attackers to escalate privileges via a change in permissions. NVD-CWE-Other
CVE-2020-18170 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm
209620 7.8 HIGH
Local 		techsmith snagit A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. NOTE: Exploit of the Snagit installer would require the end user to… CWE-269
 Improper Privilege Management 		CVE-2020-18169 2024-11-21 14:08 2021-07-27 Show GitHub Exploit DB Packet Storm