Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250831 4.3 警告 Nullsoft - Winamp の in_mp4 プラグインにおけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-4373 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250832 9.3 危険 Nullsoft - Winamp の in_nsv プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4372 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250833 9.3 危険 Nullsoft - Winamp の in_mod プラグインにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-4371 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250834 9.3 危険 Nullsoft - Winamp の in_midi プラグインにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-4370 2012-03-27 18:42 2010-11-27 Show GitHub Exploit DB Packet Storm
250835 6.4 警告 Laurent Destailleur - AWStats におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4369 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250836 7.5 危険 Laurent Destailleur - AWStats における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4368 2012-03-27 18:42 2010-12-2 Show GitHub Exploit DB Packet Storm
250837 6 警告 Bharat Mediratta - Menalto Gallery の modules/gallery/models/item.php における任意コードを実行される脆弱性 CWE-Other
その他
CVE-2010-4353 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
250838 4.3 警告 Apache Software Foundation - libcloud における証明書偽造の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-4340 2012-03-27 18:42 2011-09-12 Show GitHub Exploit DB Packet Storm
250839 4.3 警告 hypermail-project - Hypermail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4339 2012-03-27 18:42 2011-01-14 Show GitHub Exploit DB Packet Storm
250840 6.2 警告 jwilk - ocrodjvu における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2010-4338 2012-03-27 18:42 2011-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215071 5.4 MEDIUM
Network
pydio cells In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden shared user account is created in the backend with a random username. An anonymous u… CWE-287
Improper Authentication
CVE-2020-12848 2024-11-21 14:00 2020-06-5 Show GitHub Exploit DB Packet Storm
215072 6.1 MEDIUM
Network
pydio cells Pydio Cells 2.0.4 allows XSS. A malicious user can either upload or create a new file that contains potentially malicious HTML and JavaScript code to personal folders or accessible cells. CWE-79
Cross-site Scripting
CVE-2020-12853 2024-11-21 14:00 2020-06-5 Show GitHub Exploit DB Packet Storm
215073 8.1 HIGH
Network
pydio cells Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a custom generated ZIP file and leveraging… CWE-22
Path Traversal
CVE-2020-12851 2024-11-21 14:00 2020-06-5 Show GitHub Exploit DB Packet Storm
215074 6.8 MEDIUM
Network
pydio cells The update feature for Pydio Cells 2.0.4 allows an administrator user to set a custom update URL and the public RSA key used to validate the downloaded update package. The update process involves dow… CWE-20
 Improper Input Validation 
CVE-2020-12852 2024-11-21 14:00 2020-06-5 Show GitHub Exploit DB Packet Storm
215075 7.2 HIGH
Network
pydio cells Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with an administrator role. This console provides an administrator user with the po… NVD-CWE-noinfo
CVE-2020-12847 2024-11-21 14:00 2020-06-5 Show GitHub Exploit DB Packet Storm
215076 5.9 MEDIUM
Network
djangoproject
canonical
fedoraproject
netapp
debian
oracle
django
ubuntu_linux
fedora
steelstore_cloud_integrated_storage
sra_plugin
debian_linux
zfs_storage_appliance_kit
An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7. In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collis… CWE-295
Improper Certificate Validation 
CVE-2020-13254 2024-11-21 14:00 2020-06-3 Show GitHub Exploit DB Packet Storm
215077 8.0 HIGH
Network
synacor zimbra_collaboration_suite Zimbra before 8.8.15 Patch 10 and 9.x before 9.0.0 Patch 3 allows remote code execution via an avatar file. There is potential abuse of /service/upload servlet in the webmail subsystem. A user can up… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-12846 2024-11-21 14:00 2020-06-4 Show GitHub Exploit DB Packet Storm
215078 8.8 HIGH
Network
sysax multi_server An issue was discovered in Sysax Multi Server 6.90. A session can be hijacked if one observes the sid value in any /scgi URI, because it is an authentication token. CWE-384
 Session Fixation
CVE-2020-13229 2024-11-21 14:00 2020-06-2 Show GitHub Exploit DB Packet Storm
215079 6.1 MEDIUM
Network
sysax multi_server An issue was discovered in Sysax Multi Server 6.90. There is reflected XSS via the /scgi sid parameter. CWE-79
Cross-site Scripting
CVE-2020-13228 2024-11-21 14:00 2020-06-2 Show GitHub Exploit DB Packet Storm
215080 5.3 MEDIUM
Network
sysax multi_server An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid path permission error. This bypasses the fa… CWE-22
Path Traversal
CVE-2020-13227 2024-11-21 14:00 2020-06-2 Show GitHub Exploit DB Packet Storm