Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250681 4.7 警告 Linux - Linux kernel の btrfs_ioctl_clone 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-2538 2012-03-27 18:42 2010-09-30 Show GitHub Exploit DB Packet Storm
250682 6.3 警告 Linux - Linux kernel の btrfs_ioctl_clone 関数における append-only のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2537 2012-03-27 18:42 2010-09-30 Show GitHub Exploit DB Packet Storm
250683 3.5 注意 Joomla! - Joomla! の Back End におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2535 2012-03-27 18:42 2010-07-15 Show GitHub Exploit DB Packet Storm
250684 4.9 警告 アップル
FreeBSD
NetBSD
- NetBSD などの製品で使用されるカーネルの smb_subr.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2010-2530 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
250685 10 危険 Linux - Linux kernel の pppol2tp_xmit 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-2495 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
250686 4.3 警告 Roundup - Roundup の cgi/client.py におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2491 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
250687 7.2 危険 Linux - Linux kernel の ethtool_get_rxnfc 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-2478 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
250688 4.3 警告 Python Paste - Paste の paste.httpexceptions 実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2477 2012-03-27 18:42 2010-06-24 Show GitHub Exploit DB Packet Storm
250689 4.3 警告 Synology Inc. - Synology Disk Station におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2453 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
250690 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Territory Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2418 2012-03-27 18:42 2010-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209531 9.8 CRITICAL
Network
zkteco zkbiosecurity_server
facedepot_7b_firmware
A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to create arbitrary new users, elevate users to administrators, delete users, and… CWE-613
 Insufficient Session Expiration
CVE-2020-17474 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209532 5.9 MEDIUM
Network
zkteco zkbiosecurity_server
facedepot_7b_firmware
Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server. CWE-613
 Insufficient Session Expiration
CVE-2020-17473 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209533 7.8 HIGH
Local
cmsmadesimple cms_made_simple CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-17462 2024-11-21 14:08 2020-08-15 Show GitHub Exploit DB Packet Storm
209534 6.5 MEDIUM
Network
wireshark
fedoraproject
opensuse
oracle
wireshark
fedora
leap
zfs_storage_appliance_kit
In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector could crash. This was addressed in epan/dissectors/packet-kafka.c by avoiding a double free during LZ4 decompression. CWE-415
 Double Free
CVE-2020-17498 2024-11-21 14:08 2020-08-14 Show GitHub Exploit DB Packet Storm
209535 5.5 MEDIUM
Local
artifex
debian
canonical
ghostscript
debian_linux
ubuntu_linux
A buffer overflow vulnerability in GetNumSameData() in contrib/lips4/gdevlips.c of Artifex Software GhostScript v9.50 allows a remote attacker to cause a denial of service via a crafted PDF file. Thi… CWE-787
 Out-of-bounds Write
CVE-2020-17538 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209536 6.1 MEDIUM
Network
php-fusion php-fusion PHP-Fusion 9.03 allows XSS on the preview page. CWE-79
Cross-site Scripting
CVE-2020-17450 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209537 5.4 MEDIUM
Network
php-fusion php-fusion PHP-Fusion 9.03 allows XSS via the error_log file. CWE-79
Cross-site Scripting
CVE-2020-17449 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209538 5.3 MEDIUM
Network
qt
debian
fedoraproject
qt
debian_linux
fedora
An issue was discovered in Qt through 5.12.9, and 5.13.x through 5.15.x before 5.15.1. read_xbm_body in gui/image/qxbmhandler.cpp has a buffer over-read. CWE-125
Out-of-bounds Read
CVE-2020-17507 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209539 9.8 CRITICAL
Network
articatech web_proxy Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQL injection of the apikey parameter in fw.login.php. CWE-89
SQL Injection
CVE-2020-17506 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm
209540 8.8 HIGH
Network
articatech web_proxy Artica Web Proxy 4.30.000000 allows an authenticated remote attacker to inject commands via the service-cmds parameter in cyrus.php. These commands are executed with root privileges via service_cmds_… CWE-78
OS Command 
CVE-2020-17505 2024-11-21 14:08 2020-08-13 Show GitHub Exploit DB Packet Storm