Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251351	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Thunderbird/SeaMonkey における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2010-0163	2010-12-21 15:59	2010-03-16	Show	GitHub Exploit DB Packet Storm

251352	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash に脆弱性	CWE-noinfo 情報不足	CVE-2010-2884	2010-12-21 15:57	2010-09-15	Show	GitHub Exploit DB Packet Storm

251353	6.9	警告	CVS レッドハット	-	CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2010-3846	2010-12-21 15:30	2010-11-5	Show	GitHub Exploit DB Packet Storm

251354	10	危険	RealFlex Technologies	-	RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4142	2010-12-21 15:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

251355	4.3	警告	Webmin Project オラクル	-	Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4568	2010-12-21 15:14	2010-01-5	Show	GitHub Exploit DB Packet Storm

251356	6.8	警告	富士通	-	Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性	CWE-noinfo 情報不足	-	2010-12-21 14:14	2010-11-19	Show	GitHub Exploit DB Packet Storm

251357	8.3	危険	日立	-	日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	-	2010-12-21 14:06	2010-11-17	Show	GitHub Exploit DB Packet Storm

251358	4.3	警告	The PHP Group アップルサイバートラスト株式会社レッドハット	-	PHP の var_export 関数における、重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2531	2010-12-20 16:08	2010-07-22	Show	GitHub Exploit DB Packet Storm

251359	4.6	警告	サイバートラスト株式会社 Linux レッドハット	-	Hypervisor の命令のエミュレーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0435	2010-12-20 16:01	2010-08-19	Show	GitHub Exploit DB Packet Storm

251360	5	警告	レッドハット Pidgin オラクル	-	Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1624	2010-12-20 16:00	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199571	9.8	CRITICAL Network	adrianmercurio	gym_management_system	An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable.	CWE-89 SQL Injection	CVE-2020-29288	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199572	9.8	CRITICAL Network	car_rental_management_system_project	car_rental_management_system	An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php.	CWE-89 SQL Injection	CVE-2020-29287	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199573	9.8	CRITICAL Network	point_of_sales_in_php\/pdo_project	point_of_sales_in_php\/pdo	SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter to edit_category.php.	CWE-89 SQL Injection	CVE-2020-29285	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199574	9.8	CRITICAL Network	multi_restaurant_table_reservation_system_project	multi_restaurant_table_reservation_system	The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the table_id parameter which allows unauthenticated SQL Injection. An attacker can s…	CWE-89 SQL Injection	CVE-2020-29284	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199575	9.8	CRITICAL Network	online_doctor_appointment_booking_system_php_and_mysql_project	online_doctor_appointment_booking_system_php_and_mysql	An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php.	CWE-89 SQL Injection	CVE-2020-29283	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199576	9.8	CRITICAL Network	bloodx_project	bloodx	SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication.	CWE-89 SQL Injection	CVE-2020-29282	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199577	9.8	CRITICAL Network	victor_cms_project	victor_cms	The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page.	CWE-89 SQL Injection	CVE-2020-29280	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199578	9.8	CRITICAL Network	74cms	74cms	PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution.	NVD-CWE-noinfo	CVE-2020-29279	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199579	9.8	CRITICAL Network	docker	crux_linux_docker_image	The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allo…	CWE-306 Missing Authentication for Critical Function	CVE-2020-29389	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm

199580	4.8	MEDIUM Network	lepton-cms	leptoncms	Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). An attacker can inject the XSS payload in the URL field of the admin page and each time an admin visits the Menu-Pages-Pages Overview secti…	CWE-79 Cross-site Scripting	CVE-2020-29240	2024-11-21 14:23	2020-12-3	Show	GitHub Exploit DB Packet Storm