Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251001	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Performance Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4030	2012-03-27 18:42	2010-10-28	Show	GitHub Exploit DB Packet Storm

251002	7.5	危険	ヒューレット・パッカード	-	HP Storage Essentials における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4029	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251003	7.5	危険	ヒューレット・パッカード	-	HP LoadRunner の LoadRunner Web Tours におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-4028	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251004	5.6	警告	ヒューレット・パッカード	-	HP Palm webOS のカメラアプリケーションにおける任意のファイルを上書される脆弱性	CWE-noinfo 情報不足	CVE-2010-4027	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251005	6.2	警告	ヒューレット・パッカード	-	HP Palm webOS のサービス API における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-4026	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251006	9.3	危険	ヒューレット・パッカード	-	HP Palm webOS の Doc Viewer における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-4025	2012-03-27 18:42	2010-10-26	Show	GitHub Exploit DB Packet Storm

251007	6.8	警告	ヒューレット・パッカード	-	HP Insight Control Power Management におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4024	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251008	4.3	警告	ヒューレット・パッカード	-	HP Insight Control Power Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4023	2012-03-27 18:42	2010-10-25	Show	GitHub Exploit DB Packet Storm

251009	6.2	警告	アップル	-	Apple の iOS におけるパスワードロックを回避される脆弱性	CWE-362 競合状態	CVE-2010-4012	2012-03-27 18:42	2010-12-8	Show	GitHub Exploit DB Packet Storm

251010	5	警告	オラクル	-	Oracle Mojarra における View State を変更される脆弱性	CWE-310 暗号の問題	CVE-2010-4007	2012-03-27 18:42	2010-10-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208681	5.5	MEDIUM Local	spice-space debian fedoraproject	spice-vdagent debian_linux fedora	A flaw was found in the way the spice-vdagentd daemon handled file transfers from the host system to the virtual machine. Any unprivileged local guest user with access to the UNIX domain socket path …	-	CVE-2020-25650	2024-11-21 14:18	2020-11-26	Show	GitHub Exploit DB Packet Storm

208682	7.2	HIGH Network	clusterlabs debian	pacemaker debian_linux	An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tas…	NVD-CWE-Other	CVE-2020-25654	2024-11-21 14:18	2020-11-25	Show	GitHub Exploit DB Packet Storm

208683	5.3	MEDIUM Network	redhat	wildfly	A flaw was discovered in WildFly before 21.0.0.Final where, Resource adapter logs plain text JMS password at warning level on connection error, inserting sensitive information in the log file.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-25640	2024-11-21 14:18	2020-11-25	Show	GitHub Exploit DB Packet Storm

208684	9.8	CRITICAL Network	newsscriptphp	news_script_php_pro	SimplePHPscripts News Script PHP Pro 2.3 is affected by a SQL Injection via the id parameter in an editNews action.	CWE-89 SQL Injection	CVE-2020-25475	2024-11-21 14:18	2020-11-25	Show	GitHub Exploit DB Packet Storm

208685	6.1	MEDIUM Network	newsscriptphp	news_script_php_pro	SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Scripting (XSS) vulnerability via the editor_name parameter.	CWE-79 Cross-site Scripting	CVE-2020-25474	2024-11-21 14:18	2020-11-25	Show	GitHub Exploit DB Packet Storm

208686	6.5	MEDIUM Network	newsscriptphp	news_script_php_pro	SimplePHPscripts News Script PHP Pro 2.3 does not properly set the HttpOnly Flag from Session Cookies.	NVD-CWE-Other	CVE-2020-25473	2024-11-21 14:18	2020-11-25	Show	GitHub Exploit DB Packet Storm

208687	6.5	MEDIUM Network	newsscriptphp	news_script_php_pro	SimplePHPscripts News Script PHP Pro 2.3 is affected by a Cross Site Request Forgery (CSRF) vulnerability, which allows attackers to add new users.	CWE-352 Origin Validation Error	CVE-2020-25472	2024-11-21 14:18	2020-11-25	Show	GitHub Exploit DB Packet Storm

208688	7.5	HIGH Network	postgresql debian	postgresql debian_linux	A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses …	-	CVE-2020-25696	2024-11-21 14:18	2020-11-24	Show	GitHub Exploit DB Packet Storm

208689	3.5	LOW Adjacent	redhat	advanced_cluster_management_for_kubernetes	A flaw was found in rhacm versions before 2.0.5 and before 2.1.0. Two internal service APIs were incorrectly provisioned using a test certificate from the source repository. This would result in all …	CWE-798 Use of Hard-coded Credentials	CVE-2020-25688	2024-11-21 14:18	2020-11-24	Show	GitHub Exploit DB Packet Storm

208690	8.8	HIGH Adjacent	redhat fedoraproject	ceph ceph_storage openshift_container_platform fedora	A flaw was found in the Cephx authentication protocol in versions before 15.2.6 and before 14.2.14, where it does not verify Ceph clients correctly and is then vulnerable to replay attacks in Nautilu…	-	CVE-2020-25660	2024-11-21 14:18	2020-11-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed