Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251171	5	警告	yellosoft	-	YelloSoft Pinky におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3487	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251172	5	警告	SmarterTools Inc.	-	SmarterMail の FileStorageUpload.ashx におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3486	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251173	7.5	危険	LightNEasy	-	LightNEasy の common.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3485	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251174	7.5	危険	LightNEasy	-	LightNEasy の common.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3484	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251175	7.5	危険	bouzouste	-	Primitive CMS の cms_write.php における管理者権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3483	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251176	6.5	警告	bouzouste	-	Primitive CMS の cms_write.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3482	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251177	6.8	警告	ApPHP	-	ApPHP PHP MicroCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3481	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251178	4.3	警告	g.rodola	-	pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2010-3494	2012-03-27 18:42	2009-04-1	Show	GitHub Exploit DB Packet Storm

251179	6.8	警告	ApPHP	-	ApPHP PHP MicroCMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3480	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

251180	7.5	危険	boutikone	-	BoutikOne の list.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3479	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208721	5.4	MEDIUM Network	wso2	enterprise_integrator	WSO2 Enterprise Integrator 6.6.0 or earlier contains a stored cross-site scripting (XSS) vulnerability in BPMN explorer tasks.	CWE-79 Cross-site Scripting	CVE-2020-25516	2024-11-21 14:18	2020-10-29	Show	GitHub Exploit DB Packet Storm

208722	9.8	CRITICAL Network	westerndigital	my_cloud_firmware	Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud Devices prior to 5.4.1140.	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2020-25765	2024-11-21 14:18	2020-10-28	Show	GitHub Exploit DB Packet Storm

208723	6.1	MEDIUM Network	antsword_project	antsword	AntSword 2.1.8.1 contains a cross-site scripting (XSS) vulnerability in the View Site funtion. When viewing an added site, an XSS payload can be injected in cookies view which can lead to remote code…	CWE-79 Cross-site Scripting	CVE-2020-25470	2024-11-21 14:18	2020-10-26	Show	GitHub Exploit DB Packet Storm

208724	9.8	CRITICAL Network	ucms_project	ucms	An arbitrary command execution vulnerability exists in the fopen() function of file writes of UCMS v1.4.8, where an attacker can gain access to the server.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-25483	2024-11-21 14:18	2020-10-24	Show	GitHub Exploit DB Packet Storm

208725	9.8	CRITICAL Network	crmeb	crmeb	A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitrary code.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-25466	2024-11-21 14:18	2020-10-24	Show	GitHub Exploit DB Packet Storm

208726	6.5	MEDIUM Network	bigbluebutton	bigbluebutton	BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted URL in an ODF xlink field.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-25820	2024-11-21 14:18	2020-10-21	Show	GitHub Exploit DB Packet Storm

208727	7.5	HIGH Network	mozilla redhat fedoraproject oracle	network_security_services enterprise_linux fedora communications_offline_mediation_controller communications_pricing_design_center jd_edwards_enterpriseone_tools	A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote attacker to send multiple CCS messages, causing a denial of service for servers compiled …	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-25648	2024-11-21 14:18	2020-10-21	Show	GitHub Exploit DB Packet Storm

208728	7.5	HIGH Network	qualcomm	qualcomm_mobile_access_point	The QCMAP_Web_CLIENT binary in the Qualcomm QCMAP software suite prior to versions released in October 2020 does not validate the return value of a strstr() or strchr() call in the Tokenizer() functi…	CWE-476 NULL Pointer Dereference	CVE-2020-25858	2024-11-21 14:18	2020-10-16	Show	GitHub Exploit DB Packet Storm

208729	7.5	HIGH Network	powerdns opensuse	recursor leap backports_sle	An issue has been found in PowerDNS Recursor before 4.1.18, 4.2.x before 4.2.5, and 4.3.x before 4.3.5. A remote attacker can cause the cached records for a given name to be updated to the Bogus DNSS…	NVD-CWE-noinfo	CVE-2020-25829	2024-11-21 14:18	2020-10-16	Show	GitHub Exploit DB Packet Storm

208730	6.7	MEDIUM Local	qualcomm	qcmap	The QCMAP_CLI utility in the Qualcomm QCMAP software suite prior to versions released in October 2020 uses a system() call without validating the input, while handling a SetGatewayUrl() request. A lo…	CWE-78 OS Command	CVE-2020-25859	2024-11-21 14:18	2020-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed