Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 27, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250501 | 4.3 | 警告 | hypermail-project | - | Hypermail におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4339 | 2012-03-27 18:42 | 2011-01-14 | Show | GitHub Exploit DB Packet Storm |
| 250502 | 6.2 | 警告 | jwilk | - | ocrodjvu における任意のファイルを変更される脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2010-4338 | 2012-03-27 18:42 | 2011-01-20 | Show | GitHub Exploit DB Packet Storm |
| 250503 | 3.3 | 注意 | GNU Project | - | gnash の configure スクリプトにおける任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2010-4337 | 2012-03-27 18:42 | 2011-01-14 | Show | GitHub Exploit DB Packet Storm |
| 250504 | 7.5 | 危険 | Cake Software Foundation | - | CakePHP の _validatePost 関数における内部 Cake キャッシュを変更される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-4335 | 2012-03-27 18:42 | 2011-01-14 | Show | GitHub Exploit DB Packet Storm |
| 250505 | 4 | 警告 | io-socket-ssl | - | IO::Socket::SSL モジュールにおける証明書の制限を回避される脆弱性 |
CWE-310
暗号の問題 |
CVE-2010-4334 | 2012-03-27 18:42 | 2011-01-13 | Show | GitHub Exploit DB Packet Storm |
| 250506 | 7.5 | 危険 | Laurent Destailleur | - | AWStats における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4367 | 2012-03-27 18:42 | 2010-12-2 | Show | GitHub Exploit DB Packet Storm |
| 250507 | 4.3 | 警告 | abk-soft | - | Chameleon Social Networking の forum_new_topic.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4366 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 250508 | 7.5 | 危険 | Joomla! Jextensions |
- | Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4365 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 250509 | 4.3 | 警告 | dadabik | - | DaDaBIK における保護メカニズムを回避される脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4364 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 250510 | 6.8 | 警告 | mrcgiguy | - | MCG FreeTicket の contact.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4363 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 28, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201671 | 6.5 |
MEDIUM
Local |
checkpoint | endpoint_security | Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for the Domain Name. An at… |
CWE-426
Untrusted Search Path |
CVE-2020-6014 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201672 | 7.5 |
HIGH
Network |
mitsubishielectric |
melsec_iq-rj71eip91_firmware melsec_iq-rj71pn92_firmware melsec_iq-rd81dl96_firmware melsec_iq-rd81mes96n_firmware melsec_iq-rd81opc96_firmware |
Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or … |
NVD-CWE-noinfo
|
CVE-2020-5658 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201673 | 6.5 |
MEDIUM
Adjacent |
mitsubishielectric |
melsec_iq-rj71eip91_firmware melsec_iq-rj71pn92_firmware melsec_iq-rd81dl96_firmware melsec_iq-rd81mes96n_firmware melsec_iq-rd81opc96_firmware |
Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Inter… |
CWE-88
Argument Injection |
CVE-2020-5657 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201674 | 9.8 |
CRITICAL
Network |
mitsubishielectric |
melsec_iq-rj71eip91_firmware melsec_iq-rj71pn92_firmware melsec_iq-rd81dl96_firmware melsec_iq-rd81mes96n_firmware melsec_iq-rd81opc96_firmware |
Improper access control vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or bef… |
NVD-CWE-Other
|
CVE-2020-5656 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201675 | 7.5 |
HIGH
Network |
mitsubishielectric |
melsec_iq-rj71eip91_firmware melsec_iq-rj71pn92_firmware melsec_iq-rd81dl96_firmware melsec_iq-rd81mes96n_firmware melsec_iq-rd81opc96_firmware |
NULL pointer dereferences vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or b… |
CWE-476
NULL Pointer Dereference |
CVE-2020-5655 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201676 | 7.5 |
HIGH
Network |
mitsubishielectric |
melsec_iq-rj71eip91_firmware melsec_iq-rj71pn92_firmware melsec_iq-rd81dl96_firmware melsec_iq-rd81mes96n_firmware melsec_iq-rd81opc96_firmware |
Session fixation vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ… |
CWE-384
Session Fixation |
CVE-2020-5654 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201677 | 9.8 |
CRITICAL
Network |
mitsubishielectric |
melsec_iq-rj71eip91_firmware melsec_iq-rj71pn92_firmware melsec_iq-rd81dl96_firmware melsec_iq-rd81mes96n_firmware melsec_iq-rd81opc96_firmware |
Buffer overflow vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series (RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ7… |
CWE-120
Classic Buffer Overflow |
CVE-2020-5653 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201678 | 7.5 |
HIGH
Network |
mitsubishielectric |
melsec_q-q04udpvcpu_firmware melsec_q-q06udpvcpu_firmware melsec_q-q13udpvcpu_firmware melsec_q-q26udpvcpu_firmware melsec_q-q03udvcpu_firmware melsec_q-q04udvcpu_firmware melsec_q-… |
Uncontrolled resource consumption vulnerability in Ethernet Port on MELSEC iQ-R, Q and L series CPU modules (R 00/01/02 CPU firmware versions '20' and earlier, R 04/08/16/32/120 (EN) CPU firmware ver… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2020-5652 | 2024-11-21 14:34 | 2020-11-3 | Show | GitHub Exploit DB Packet Storm |
| 201679 | 7.8 |
HIGH
Local |
nvidia | cuda_toolkit | NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or i… |
CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write |
CVE-2020-5991 | 2024-11-21 14:34 | 2020-10-31 | Show | GitHub Exploit DB Packet Storm |
| 201680 | 7.9 |
HIGH
Network |
vmware | single_sign-on_for_tanzu | Single Sign-On for Vmware Tanzu all versions prior to 1.11.3 ,1.12.x versions prior to 1.12.4 and 1.13.x prior to 1.13.1 are vulnerable to user impersonation attack.If two users are logged in to the … |
CWE-287
Improper Authentication |
CVE-2020-5425 | 2024-11-21 14:34 | 2020-11-1 | Show | GitHub Exploit DB Packet Storm |