Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 2, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251211 | 4.3 | 警告 | Invision Power Services, Inc | - | IP.Board の admin/sources/classes/bbcode/custom/defaults.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3424 | 2012-03-27 18:42 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251212 | 7.5 | 危険 | freka | - | Drupal の Yr Weatherdata モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3423 | 2012-03-27 18:42 | 2010-09-8 | Show | GitHub Exploit DB Packet Storm |
| 251213 | 7.5 | 危険 | solventus Joomla! |
- | Jmoola! 用の JGen コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3422 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251214 | 4.3 | 警告 | productcart | - | ProductCart の AffiliateLogin.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3421 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251215 | 4.3 | 警告 | webassist | - | PowerStore の Products_Results.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3420 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251216 | 7.5 | 危険 | Haudenschilt | - | FCMS における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3419 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251217 | 4.3 | 警告 | NetArt Media | - | NetArt Media Car Portal におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3418 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251218 | 7.5 | 危険 | eshtery.com | - | eshtery CMS における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3404 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251219 | 9.3 | 危険 | クアルコム | - | QXDM における任意のコードを実行されるおよび DLL ハイジャック攻撃をされる脆弱性 |
CWE-Other
その他 |
CVE-2010-3403 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251220 | 9.3 | 危険 | dm computer solutions | - | IDM Computer Solutions UltraEdit における任意のコードを実行される脆弱性 |
CWE-Other
その他 |
CVE-2010-3402 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 2, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 208691 | 6.1 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 90.0.10 allows self XSS via WHM Manage API Tokens interfaces (SEC-569). |
CWE-79
Cross-site Scripting |
CVE-2020-26113 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208692 | 7.5 |
HIGH
Network |
cpanel | cpanel | The email quota cache in cPanel before 90.0.10 allows overwriting of files. |
NVD-CWE-noinfo
|
CVE-2020-26112 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208693 | 6.1 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 90.0.10 allows self XSS via the WHM Edit DNS Zone interface (SEC-566). |
CWE-79
Cross-site Scripting |
CVE-2020-26111 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208694 | 6.1 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 88.0.13 allows self XSS via DNS Zone Manager DNSSEC interfaces (SEC-564). |
CWE-79
Cross-site Scripting |
CVE-2020-26110 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208695 | 7.5 |
HIGH
Network |
cpanel | cpanel | cPanel before 88.0.13 allows bypass of a protection mechanism that attempted to restrict package modification (SEC-557). |
NVD-CWE-Other
|
CVE-2020-26109 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208696 | 9.8 |
CRITICAL
Network |
cpanel | cpanel | cPanel before 88.0.13 mishandles file-extension dispatching, leading to code execution (SEC-488). |
NVD-CWE-Other
|
CVE-2020-26108 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208697 | 7.5 |
HIGH
Network |
cpanel | cpanel | cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys (SEC-561). |
CWE-330
Use of Insufficiently Random Values |
CVE-2020-26107 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208698 | 7.5 |
HIGH
Network |
cpanel | cpanel | cPanel before 88.0.3 has weak permissions (world readable) for the proxy subdomains log file (SEC-558). |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2020-26106 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208699 | 9.8 |
CRITICAL
Network |
cpanel | cpanel | In cPanel before 88.0.3, insecure chkservd test credentials are used on a templated VM (SEC-554). |
CWE-287
Improper Authentication |
CVE-2020-26105 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |
| 208700 | 7.5 |
HIGH
Network |
cpanel | cpanel | In cPanel before 88.0.3, an insecure SRS secret is used on a templated VM (SEC-552). |
CWE-922
Insecure Storage of Sensitive Information |
CVE-2020-26104 | 2024-11-21 14:19 | 2020-09-25 | Show | GitHub Exploit DB Packet Storm |