Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251061 4.3 警告 マイクロソフト - Microsoft mshtml.dll の sertIntoTimeoutList 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2010-3886 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
251062 6.8 警告 CMS Made Simple - CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3884 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
251063 6.8 警告 CMS Made Simple - CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3883 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
251064 4.3 警告 CMS Made Simple - CMS Made Simple におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3882 2012-03-27 18:42 2010-10-8 Show GitHub Exploit DB Packet Storm
251065 4.3 警告 レッドハット - Red Hat JBoss Enterprise Application Platform の JMX Console におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3878 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
251066 4.3 警告 Mahara - Mahara の blocktype/groupviews/theme/raw/groupviews.tpl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3871 2012-03-27 18:42 2010-11-9 Show GitHub Exploit DB Packet Storm
251067 4 警告 レッドハット - RHCS および Dogtag Certificate System における任意の認証番号を生成される脆弱性 CWE-310
暗号の問題
CVE-2010-3869 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
251068 5.8 警告 レッドハット - RHCS および Dogtag Certificate System における PIN を取得される脆弱性 CWE-287
不適切な認証
CVE-2010-3868 2012-03-27 18:42 2010-11-8 Show GitHub Exploit DB Packet Storm
251069 2.6 注意 レッドハット - Red Hat JBoss Enterprise Application Platform および JBoss Enterprise Web Platform の Boss Remoting におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-3862 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
251070 6.4 警告 レッドハット - Red Hat Conga の Luciにおける repoze.who 認証をバイパスすることが容易になる脆弱性 CWE-287
不適切な認証
CVE-2010-3852 2012-03-27 18:42 2010-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215251 8.8 HIGH
Network
gitlab gitlab Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API CWE-862
 Missing Authorization
CVE-2020-13270 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
215252 6.1 MEDIUM
Network
gitlab gitlab A Reflected Cross-Site Scripting vulnerability allowed the execution of arbitrary Javascript code on the Static Site Editor in GitLab CE/EE 12.10 and later through 13.0.1 CWE-79
Cross-site Scripting
CVE-2020-13269 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
215253 5.3 MEDIUM
Network
gitlab gitlab A specially crafted request could be used to confirm the existence of files hosted on object storage services, without disclosing their contents. This vulnerability affects GitLab CE/EE 12.10 and lat… CWE-200
NVD-CWE-noinfo
Information Exposure
CVE-2020-13268 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
215254 6.1 MEDIUM
Network
gitlab gitlab A Stored Cross-Site Scripting vulnerability allowed the execution on Javascript payloads on the Metrics Dashboard in GitLab CE/EE 12.8 and later through 13.0.1 CWE-79
Cross-site Scripting
CVE-2020-13267 2024-11-21 14:00 2020-06-11 Show GitHub Exploit DB Packet Storm
215255 9.8 CRITICAL
Network
anydesk anydesk AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution. CWE-134
Use of Externally-Controlled Format String
CVE-2020-13160 2024-11-21 14:00 2020-06-10 Show GitHub Exploit DB Packet Storm
215256 4.3 MEDIUM
Network
gitlab gitlab Insecure authorization in Project Deploy Keys in GitLab CE/EE 12.8 and later through 13.0.1 allows users to update permissions of other users' deploy keys under certain conditions CWE-862
 Missing Authorization
CVE-2020-13266 2024-11-21 14:00 2020-06-10 Show GitHub Exploit DB Packet Storm
215257 9.8 CRITICAL
Network
codedropz drag_and_drop_multiple_file_upload_-_contact_form_7 The drag-and-drop-multiple-file-upload-contact-form-7 plugin before 1.3.3.3 for WordPress allows Unrestricted File Upload and remote code execution by setting supported_type to php% and uploading a .… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-12800 2024-11-21 14:00 2020-06-9 Show GitHub Exploit DB Packet Storm
215258 6.5 MEDIUM
Network
libreoffice
opensuse
fedoraproject
libreoffice
leap
fedora
ODF documents can contain forms to be filled out by the user. Similar to HTML forms, the contained form data can be submitted to a URI, for example, to an external web server. To create submittable f… CWE-20
 Improper Input Validation 
CVE-2020-12803 2024-11-21 14:00 2020-06-9 Show GitHub Exploit DB Packet Storm
215259 7.5 HIGH
Network
ui
w1.fi
asus
broadcom
canon
cisco
dlink
dell
epson
hp
huawei
nec
netgear
ruckussecurity
tp-link
zte
zyxel
microsoft
fedoraproject
debian
canonical
unifi_controller
hostapd
rt-n11
adsl
selphy_cp1200
wap150
wap351
wap131
dvg-n5412sp
b1165nfw
ew-m970a3t
ep-101
xp-8500
xp-702
xp-340
xp-620
xp-320
x…
The Open Connectivity Foundation UPnP specification before 2020-04-17 does not forbid the acceptance of a subscription request with a delivery URL on a different network segment than the fully qualif… CWE-276
Incorrect Default Permissions 
CVE-2020-12695 2024-11-21 14:00 2020-06-9 Show GitHub Exploit DB Packet Storm
215260 5.3 MEDIUM
Network
libreoffice
fedoraproject
opensuse
libreoffice
fedora
leap
LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who w… NVD-CWE-Other
CVE-2020-12802 2024-11-21 14:00 2020-06-9 Show GitHub Exploit DB Packet Storm