Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250641	4.3	警告	ヒューレット・パッカード	-	HP Insight Diagnostics Online Edition におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3003	2012-03-27 18:42	2010-08-30	Show	GitHub Exploit DB Packet Storm

250642	6.2	警告	Linux	-	Linux kernel の drivers/media/video/v4l2-compat-ioctl32.c における任意のカーネルメモリロケーションに書き込まれる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2963	2012-03-27 18:42	2010-11-26	Show	GitHub Exploit DB Packet Storm

250643	6.9	警告	scott james remnant	-	mountall の mountall.c における権限を取得される脆弱性	CWE-362 競合状態	CVE-2010-2961	2012-03-27 18:42	2010-09-14	Show	GitHub Exploit DB Packet Storm

250644	7.2	危険	Linux	-	Linux kernel の keyctl_session_to_parent 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-2960	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

250645	7.2	危険	Linux	-	Linux kernel の net/can/bcm.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-2959	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

250646	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の libraries/Error.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2958	2012-03-27 18:42	2010-08-30	Show	GitHub Exploit DB Packet Storm

250647	2.6	注意	s9y	-	Serendipity におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2957	2012-03-27 18:42	2010-08-27	Show	GitHub Exploit DB Packet Storm

250648	6.9	警告	Apache Software Foundation	-	Debian GNU/Linux の CouchDB における権限昇格の脆弱性	CWE-Other その他	CVE-2010-2953	2012-03-27 18:42	2010-09-9	Show	GitHub Exploit DB Packet Storm

250649	4.3	警告	Apache Software Foundation	-	Apache Traffic Server における内部 DNS キャッシュポイズニングの脆弱性	CWE-20 不適切な入力確認	CVE-2010-2952	2012-03-27 18:42	2010-09-13	Show	GitHub Exploit DB Packet Storm

250650	5	警告	Squid-cache.org	-	Squid の dns_internal.cc におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-2951	2012-03-27 18:42	2010-10-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214421	4.9	MEDIUM Network	chadhaajay	phpkb	Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (../) via the GET parameter fil…	CWE-22 Path Traversal	CVE-2020-10387	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

214422	7.2	HIGH Network	chadhaajay	phpkb	admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ directory.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-10386	2024-11-21 13:55	2020-03-12	Show	GitHub Exploit DB Packet Storm

214423	9.8	CRITICAL Network	technicolor	tc7337net_firmware	Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-10376	2024-11-21 13:55	2020-03-11	Show	GitHub Exploit DB Packet Storm

214424	5.4	MEDIUM Network	ramp	altimeter	Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI.	CWE-79 Cross-site Scripting	CVE-2020-10372	2024-11-21 13:55	2020-03-11	Show	GitHub Exploit DB Packet Storm

214425	9.0	CRITICAL Network	samsung micron skhynix	lpddr4 ddr4 ddr4_sdram	Modern DRAM chips (DDR4 and LPDDR4 after 2015) are affected by a vulnerability in deployment of internal mitigations against RowHammer attacks known as Target Row Refresh (TRR), aka the TRRespass iss…	CWE-20 Improper Input Validation	CVE-2020-10255	2024-11-21 13:55	2020-03-11	Show	GitHub Exploit DB Packet Storm

214426	5.5	MEDIUM Local	imagemagick	imagemagick	In ImageMagick 7.0.9, an out-of-bounds read vulnerability exists within the ReadHEICImageByID function in coders\heic.c. It can be triggered via an image with a width or height value that exceeds the…	CWE-125 Out-of-bounds Read	CVE-2020-10251	2024-11-21 13:55	2020-03-10	Show	GitHub Exploit DB Packet Storm

214427	9.8	CRITICAL Network	-	-	The ThemeREX Addons plugin before 2020-03-09 for WordPress lacks access control on the /trx_addons/v2/get/sc_layout REST API endpoint, allowing for PHP functions to be executed by any users, because …	CWE-94 CWE-862 Code Injection Missing Authorization	CVE-2020-10257	2024-11-21 13:55	2020-03-10	Show	GitHub Exploit DB Packet Storm

214428	9.8	CRITICAL Network	meinbwa	direx-pro_firmware	BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstall.php3.	CWE-78 OS Command	CVE-2020-10250	2024-11-21 13:55	2020-03-10	Show	GitHub Exploit DB Packet Storm

214429	5.3	MEDIUM Network	meinbwa	direx-pro_firmware	BWA DiREX-Pro 1.2181 devices allow full path disclosure via an invalid name array parameter to val_soft.php3.	NVD-CWE-noinfo	CVE-2020-10249	2024-11-21 13:55	2020-03-10	Show	GitHub Exploit DB Packet Storm

214430	7.5	HIGH Network	meinbwa	direx-pro_firmware	BWA DiREX-Pro 1.2181 devices allow remote attackers to discover passwords via a direct request to val_users.php3.	CWE-425 Direct Request ('Forced Browsing')	CVE-2020-10248	2024-11-21 13:55	2020-03-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed