Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251101	4.3	警告	TYPO3 Association	-	TYPO3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3715	2012-03-27 18:42	2010-10-6	Show	GitHub Exploit DB Packet Storm

251102	7.1	危険	TYPO3 Association	-	TYPO3 の jumpUrl 実装における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3714	2012-03-27 18:42	2010-10-6	Show	GitHub Exploit DB Packet Storm

251103	4.3	警告	usebb	-	UseBB の rss.php におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3713	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

251104	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3712	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

251105	7.5	危険	レッドハット	-	Red Hat JBoss Enterprise Application Platform および JBoss Enterprise SOA Platform の JBoss Drools における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3708	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

251106	4	警告	レッドハット	-	Red Hat Enterprise MRG の lib/MessageStoreImpl.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3701	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

251107	5	警告	VMware IBM acegisecurity	-	VMware SpringSource Spring Security および IBM WAS で使用される Acegi Security におけるセキュリティ制約条件を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3700	2012-03-27 18:42	2010-10-27	Show	GitHub Exploit DB Packet Storm

251108	4.3	警告	FreeRADIUS	-	FreeRADIUS の wait_for_child_to_die 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3697	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

251109	4.3	警告	FreeRADIUS	-	FreeRADIUS の fr_dhcp_decode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3696	2012-03-27 18:42	2010-09-28	Show	GitHub Exploit DB Packet Storm

251110	4.3	警告	Horde	-	Horde IMP および Horde Groupware Webmail Edition の fetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3695	2012-03-27 18:42	2011-03-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215191	5.3	MEDIUM Network	fanuc	series_30i_firmware series_31i_firmware series_32i-b_plus_firmware series_35i-b_firmware power_motion_i-model_a_firmware series_0i-model_f_plus_firmware series_0i-model_f_firmware	A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-12739	2024-11-21 14:00	2020-08-4	Show	GitHub Exploit DB Packet Storm

215192	7.5	HIGH Network	cherokee-project	cherokee	Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resour…	CWE-476 NULL Pointer Dereference	CVE-2020-12845	2024-11-21 14:00	2020-07-28	Show	GitHub Exploit DB Packet Storm

215193	5.5	MEDIUM Local	pulsesecure ivanti	pulse_connect_secure connect_secure pulse_policy_secure policy_secure	An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping in…	NVD-CWE-noinfo	CVE-2020-12880	2024-11-21 14:00	2020-07-28	Show	GitHub Exploit DB Packet Storm

215194	9.8	CRITICAL Network	fortinet	fortios	An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second fact…	CWE-287 CWE-178 Improper Authentication Improper Handling of Case Sensitivity	CVE-2020-12812	2024-11-21 14:00	2020-07-25	Show	GitHub Exploit DB Packet Storm

215195	6.7	MEDIUM Local	dlink	dsl-7740c_firmware	D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command.	CWE-78 OS Command	CVE-2020-12774	2024-11-21 14:00	2020-07-22	Show	GitHub Exploit DB Packet Storm

215196	8.8	HIGH Network	seczetta	neprofile	A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of t…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-12854	2024-11-21 14:00	2020-07-16	Show	GitHub Exploit DB Packet Storm

215197	9.8	CRITICAL Network	inetsoftware	i-net_clear_reports	XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a we…	CWE-611 XXE	CVE-2020-12684	2024-11-21 14:00	2020-07-16	Show	GitHub Exploit DB Packet Storm

215198	4.6	MEDIUM Physics	yubico	libykpiv piv_tool_manager yubikey_smart_card_minidriver	An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. Thi…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-13132	2024-11-21 14:00	2020-07-10	Show	GitHub Exploit DB Packet Storm

215199	4.3	MEDIUM Physics	yubico	libykpiv piv_tool_manager yubikey_smart_card_minidriver	An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. …	CWE-125 Out-of-bounds Read	CVE-2020-13131	2024-11-21 14:00	2020-07-10	Show	GitHub Exploit DB Packet Storm

215200	9.8	CRITICAL Network	protocol	gossipsub	Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.	NVD-CWE-noinfo	CVE-2020-12821	2024-11-21 14:00	2020-07-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed