Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251281	6.9	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の TSA コンポーネントの CCAgent オプションにおける Contact Center 操作を監視または再設定される脆弱性	CWE-200 情報漏えい	CVE-2010-3280	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251282	7.6	危険	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の CCAgent オプションのディフォルト設定における Contact Center 操作を監視または再設定される脆弱性	CWE-16 環境設定	CVE-2010-3279	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251283	2.1	注意	VMware	-	VMware Workstation および VMware Player のインストーラにおける Web スクリプトまたは HTML の想定外の解釈が発生する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3277	2012-03-27 18:42	2010-09-23	Show	GitHub Exploit DB Packet Storm

251284	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3276	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251285	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3275	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

251286	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の Employee Search Engine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3274	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251287	5	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3273	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251288	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の security-questions 実装における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3272	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

251289	6.8	警告	IBM	-	IBM WAS の Integrated Solutions Console におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3271	2012-03-27 18:42	2011-07-18	Show	GitHub Exploit DB Packet Storm

251290	6.8	警告	シスコシステムズ	-	Cisco WebEx Meeting Center T27LB におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3270	2012-03-27 18:42	2011-02-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208551	8.8	HIGH Network	enphase	envoy_firmware	An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /installer/upgrade_start allows remote authenticated users to execute arbitrary comma…	CWE-78 OS Command	CVE-2020-25755	2024-11-21 14:18	2021-06-17	Show	GitHub Exploit DB Packet Storm

208552	7.5	HIGH Network	enphase	envoy_firmware	An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password deri…	CWE-916 Use of Password Hash With Insufficient Computational Effort	CVE-2020-25754	2024-11-21 14:18	2021-06-17	Show	GitHub Exploit DB Packet Storm

208553	9.8	CRITICAL Network	enphase	envoy_firmware	An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an …	NVD-CWE-noinfo	CVE-2020-25753	2024-11-21 14:18	2021-06-17	Show	GitHub Exploit DB Packet Storm

208554	5.3	MEDIUM Network	enphase	envoy_firmware	An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded va…	CWE-798 Use of Hard-coded Credentials	CVE-2020-25752	2024-11-21 14:18	2021-06-17	Show	GitHub Exploit DB Packet Storm

208555	5.5	MEDIUM Local	long_range_zip_project debian	long_range_zip debian_linux	A null pointer dereference was discovered lzo_decompress_buf in stream.c in Irzip 0.621 which allows an attacker to cause a denial of service (DOS) via a crafted compressed file.	CWE-476 NULL Pointer Dereference	CVE-2020-25467	2024-11-21 14:18	2021-06-11	Show	GitHub Exploit DB Packet Storm

208556	4.8	MEDIUM Network	silverstripe	silverstripe	SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity (XXE) attacks. When …	CWE-611 XXE	CVE-2020-25817	2024-11-21 14:18	2021-06-9	Show	GitHub Exploit DB Packet Storm

208557	8.1	HIGH Network	redhat	cloudforms	A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted onl…	NVD-CWE-Other	CVE-2020-25716	2024-11-21 14:18	2021-06-8	Show	GitHub Exploit DB Packet Storm

208558	6.1	MEDIUM Network	dogtagpki	dogtagpki	A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get auto…	CWE-79 Cross-site Scripting	CVE-2020-25715	2024-11-21 14:18	2021-05-28	Show	GitHub Exploit DB Packet Storm

208559	7.5	HIGH Network	openldap redhat debian fedoraproject	openldap enterprise_linux jboss_enterprise_web_server jboss_enterprise_application_platform jboss_core_services debian_linux fedora	A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest th…	-	CVE-2020-25710	2024-11-21 14:18	2021-05-28	Show	GitHub Exploit DB Packet Storm

208560	4.3	MEDIUM Network	redhat quarkus	resteasy quarkus	A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerabi…	-	CVE-2020-25724	2024-11-21 14:18	2021-05-27	Show	GitHub Exploit DB Packet Storm