Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250931	4.3	警告	Moodle Yahoo! Mozilla Foundation	-	Bugzilla などの製品で使用される YUI の Flash コンポーネント構造におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4207	2012-03-27 18:42	2010-11-7	Show	GitHub Exploit DB Packet Storm

250932	7.5	危険	onlinetechtools.com	-	OWOS の process.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4186	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

250933	7.5	危険	energine	-	Energine における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4185	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

250934	5	警告	netsupportsoftware	-	NSM における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2010-4184	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

250935	4.3	警告	htmlpurifier マイクロソフト	-	HTML Purifier におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4183	2012-03-27 18:42	2010-09-5	Show	GitHub Exploit DB Packet Storm

250936	5	警告	Yaws	-	Yaws におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4181	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250937	4	警告	dracut Project kernel.org	-	dracut におけるローカルユーザの tty0 からターナミルデータを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4176	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

250938	3.3	注意	OpenFabrics Alliance	-	libsdp の libsdp.conf のディフォルト設定における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-4173	2012-03-27 18:42	2010-11-22	Show	GitHub Exploit DB Packet Storm

250939	5	警告	OpenTTD	-	OpenTTD におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4168	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

250940	7.5	危険	Joomla!	-	Joomla! における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4166	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215141	3.3	LOW Local	apache	cordova	We have resolved a security issue in the camera plugin that could have affected certain Cordova (Android) applications. An attacker who could install (or lead the victim to install) a specially craft…	NVD-CWE-noinfo	CVE-2020-11990	2024-11-21 13:59	2020-12-2	Show	GitHub Exploit DB Packet Storm

215142	5.4	MEDIUM Network	intelbras	tip200_firmware tip200lite_firmware tip300_firmware	Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.	CWE-79 Cross-site Scripting	CVE-2020-12262	2024-11-21 13:59	2020-11-27	Show	GitHub Exploit DB Packet Storm

215143	6.5	MEDIUM Adjacent	linux	linux_kernel	Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.	CWE-909 Missing Initialization of Resource	CVE-2020-12352	2024-11-21 13:59	2020-11-24	Show	GitHub Exploit DB Packet Storm

215144	8.8	HIGH Adjacent	linux	linux_kernel	Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.	CWE-20 Improper Input Validation	CVE-2020-12351	2024-11-21 13:59	2020-11-24	Show	GitHub Exploit DB Packet Storm

215145	7.3	HIGH Local	beckhoff	twincat_extended_automation_runtime	The default installation path of the TwinCAT XAR 3.1 software in all versions is underneath C:\TwinCAT. If the directory does not exist it and further subdirectories are created with permissions whic…	CWE-276 Incorrect Default Permissions	CVE-2020-12510	2024-11-21 13:59	2020-11-20	Show	GitHub Exploit DB Packet Storm

215146	6.5	MEDIUM Network	endress	rsg35_firmware rsg45_firmware orsg35_firmware orsg45_firmware	Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) and Memograph M (Neutral/Private Label) (RSG45, ORSG45) with Firmware version V2.0.0 and above is prone to exposure of sensitive info…	CWE-200 Information Exposure	CVE-2020-12496	2024-11-21 13:59	2020-11-20	Show	GitHub Exploit DB Packet Storm

215147	8.8	HIGH Network	endress	rsg35_firmware rsg45_firmware orsg35_firmware orsg45_firmware	Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected device has a web-based user interface w…	CWE-269 Improper Privilege Management	CVE-2020-12495	2024-11-21 13:59	2020-11-20	Show	GitHub Exploit DB Packet Storm

215148	7.5	HIGH Network	symantec	endpoint_detection_and_response	Symantec Endpoint Detection & Response, prior to 4.5, may be susceptible to an information disclosure issue, which is a type of vulnerability that could potentially allow unauthorized access to data.	NVD-CWE-noinfo	CVE-2020-12593	2024-11-21 13:59	2020-11-19	Show	GitHub Exploit DB Packet Storm

215149	9.8	CRITICAL Network	intel	open_webrtc_toolkit	Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.	NVD-CWE-Other	CVE-2020-12338	2024-11-21 13:59	2020-11-14	Show	GitHub Exploit DB Packet Storm

215150	8.8	HIGH Adjacent	intel	proset\/wireless_wifi	Insufficient control flow management in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent …	NVD-CWE-noinfo	CVE-2020-12313	2024-11-21 13:59	2020-11-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed