Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 6, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251271 | 6.8 | 警告 | mrcgiguy | - | MCG FreeTicket の contact.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4500 | 2012-03-27 18:42 | 2010-12-8 | Show | GitHub Exploit DB Packet Storm |
| 251272 | 9 | 危険 | TIBCO Software | - | TIBCO ActiveMatrix Service Grid などで使用される ActiveMatrix Runtime コンポーネントにおける任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-4495 | 2012-03-27 18:42 | 2010-12-14 | Show | GitHub Exploit DB Packet Storm |
| 251273 | 4.3 | 警告 | - | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-4493 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm | |
| 251274 | 10 | 危険 | - | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-4492 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm | |
| 251275 | 4.3 | 警告 | - | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-4491 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm | |
| 251276 | 9.3 | 危険 | - | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-4490 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm | |
| 251277 | 4.3 | 警告 | - | Google Chrome およびその他の製品で使用されている libvpx におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-DesignError
|
CVE-2010-4489 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm | |
| 251278 | 5 | 警告 | - | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-4488 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm | |
| 251279 | 7.5 | 危険 | アップル Linux |
- | Google Chrome における不完全なブラックリストに関連した脆弱性\ |
CWE-Other
その他 |
CVE-2010-4487 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm |
| 251280 | 9.3 | 危険 | - | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-4486 | 2012-03-27 18:42 | 2010-12-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 7, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 202571 | 7.5 |
HIGH
Network |
gitlab | gitlab | GitLab EE 8.0 through 12.7.2 has Incorrect Access Control. |
CWE-862
Missing Authorization |
CVE-2020-7968 | 2024-11-21 14:38 | 2020-02-6 | Show | GitHub Exploit DB Packet Storm |
| 202572 | 4.3 |
MEDIUM
Network |
gitlab | gitlab | GitLab EE 8.0 through 12.7.2 has Insecure Permissions (issue 1 of 2). |
CWE-276
Incorrect Default Permissions |
CVE-2020-7967 | 2024-11-21 14:38 | 2020-02-6 | Show | GitHub Exploit DB Packet Storm |
| 202573 | 7.5 |
HIGH
Network |
gitlab | gitlab | GitLab EE 11.11 and later through 12.7.2 allows Directory Traversal. |
CWE-22
Path Traversal |
CVE-2020-7966 | 2024-11-21 14:38 | 2020-02-6 | Show | GitHub Exploit DB Packet Storm |
| 202574 | 9.8 |
CRITICAL
Network |
gitlab | gitlab | GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
CWE-276
Incorrect Default Permissions |
CVE-2020-8114 | 2024-11-21 14:38 | 2020-02-6 | Show | GitHub Exploit DB Packet Storm |
| 202575 | 5.3 |
MEDIUM
Network |
gitlab | gitlab | GitLab EE 8.9 and later through 12.7.2 has Insecure Permission |
CWE-276
Incorrect Default Permissions |
CVE-2020-7979 | 2024-11-21 14:38 | 2020-02-6 | Show | GitHub Exploit DB Packet Storm |
| 202576 | 7.5 |
HIGH
Network |
squid-cache opensuse canonical |
squid leap ubuntu_linux |
An issue was discovered in Squid before 4.10. Due to incorrect input validation, the NTLM authentication credentials parser in ext_lm_group_acl may write to memory outside the credentials buffer. On … |
CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write |
CVE-2020-8517 | 2024-11-21 14:38 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 202577 | 7.3 |
HIGH
Network |
squid-cache canonical opensuse fedoraproject debian |
squid ubuntu_linux leap fedora debian_linux |
An issue was discovered in Squid before 4.10. Due to incorrect buffer management, a remote client can cause a buffer overflow in a Squid instance acting as a reverse proxy. |
CWE-787 CWE-131 Out-of-bounds Write Incorrect Calculation of Buffer Size |
CVE-2020-8450 | 2024-11-21 14:38 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 202578 | 7.5 |
HIGH
Network |
squid-cache debian canonical opensuse fedoraproject |
squid debian_linux ubuntu_linux leap fedora |
An issue was discovered in Squid before 4.10. Due to incorrect input validation, it can interpret crafted HTTP requests in unexpected ways to access server resources prohibited by earlier security fi… |
CWE-668
Exposure of Resource to Wrong Sphere |
CVE-2020-8449 | 2024-11-21 14:38 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 202579 | 9.8 |
CRITICAL
Network |
klona_project | klona | Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona. |
CWE-20
Improper Input Validation |
CVE-2020-8125 | 2024-11-21 14:38 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 202580 | 5.3 |
MEDIUM
Network |
url-parse_project | url-parse | Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. |
CWE-20
Improper Input Validation |
CVE-2020-8124 | 2024-11-21 14:38 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |