Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252661	4.3	警告	hypermail-project	-	Hypermail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4339	2012-03-27 18:42	2011-01-14	Show	GitHub Exploit DB Packet Storm

252662	6.2	警告	jwilk	-	ocrodjvu における任意のファイルを変更される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-4338	2012-03-27 18:42	2011-01-20	Show	GitHub Exploit DB Packet Storm

252663	3.3	注意	GNU Project	-	gnash の configure スクリプトにおける任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-4337	2012-03-27 18:42	2011-01-14	Show	GitHub Exploit DB Packet Storm

252664	7.5	危険	Cake Software Foundation	-	CakePHP の _validatePost 関数における内部 Cake キャッシュを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4335	2012-03-27 18:42	2011-01-14	Show	GitHub Exploit DB Packet Storm

252665	4	警告	io-socket-ssl	-	IO::Socket::SSL モジュールにおける証明書の制限を回避される脆弱性	CWE-310 暗号の問題	CVE-2010-4334	2012-03-27 18:42	2011-01-13	Show	GitHub Exploit DB Packet Storm

252666	7.5	危険	Laurent Destailleur	-	AWStats における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4367	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

252667	4.3	警告	abk-soft	-	Chameleon Social Networking の forum_new_topic.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4366	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

252668	7.5	危険	Joomla! Jextensions	-	Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4365	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

252669	4.3	警告	dadabik	-	DaDaBIK における保護メカニズムを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4364	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

252670	6.8	警告	mrcgiguy	-	MCG FreeTicket の contact.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4363	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
219911	8.8	HIGH Network	fasterxml debian netapp oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage retail_xstore_point_of_service primavera_unifier weblogic_server retail_merchandising_system agile_plm bankin…	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, a…	CWE-502 Deserialization of Untrusted Data	CVE-2020-11111	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

219912	6.1	MEDIUM Network	tecrail	responsive_filemanager	An issue was discovered in Responsive Filemanager through 9.14.0. In the dialog.php page, the session variable $_SESSION['RF']["view_type"] wasn't sanitized if it was already set. This made stored XS…	CWE-79 Cross-site Scripting	CVE-2020-11106	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

219913	9.8	CRITICAL Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. It employs caching of std::shared_ptr values, using the raw pointer address as a unique identifier. This becomes problematic if an std::share…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-11105	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

219914	5.3	MEDIUM Network	usc	cereal	An issue was discovered in USC iLab cereal through 1.3.0. Serialization of an (initialized) C/C++ long double variable into a BinaryArchive or PortableBinaryArchive leaks several bytes of stack or he…	CWE-908 Use of Uninitialized Resource	CVE-2020-11104	2024-11-21 13:56	2020-03-31	Show	GitHub Exploit DB Packet Storm

219915	7.8	HIGH Local	phoenixcontact	portico_server_4_client portico_server_16_client portico_server_1_client	Local Privilege Escalation can occur in PHOENIX CONTACT PORTICO SERVER through 3.0.7 when installed to run as a service.	CWE-269 Improper Privilege Management	CVE-2020-10940	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

219916	7.8	HIGH Local	phoenixcontact	pc_worx_srt	Insecure, default path permissions in PHOENIX CONTACT PC WORX SRT through 1.14 allow for local privilege escalation.	CWE-276 Incorrect Default Permissions	CVE-2020-10939	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

219917	9.8	CRITICAL Network	gitlab	gitlab	GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-10956	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

219918	6.5	MEDIUM Network	gitlab debian	gitlab debian_linux	GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders.	CWE-862 Missing Authorization	CVE-2020-10955	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

219919	7.5	HIGH Network	gitlab	gitlab	GitLab through 12.9 is affected by a potential DoS in repository archive download.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-10954	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm

219920	7.5	HIGH Network	gitlab	gitlab	In GitLab EE 11.7 through 12.9, the NPM feature is vulnerable to a path traversal issue.	CWE-22 Path Traversal	CVE-2020-10953	2024-11-21 13:56	2020-03-28	Show	GitHub Exploit DB Packet Storm