Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252931	4.3	警告	My Kazaam	-	My Kazaam Notes Management System におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4985	2011-12-9 14:35	2011-11-1	Show	GitHub Exploit DB Packet Storm

252932	7.5	危険	Cafuego	-	Simple Document Management System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4986	2011-12-9 14:34	2011-11-1	Show	GitHub Exploit DB Packet Storm

252933	7.5	危険	KMSoft	-	KMSoft Guestbook の default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4987	2011-12-9 14:34	2011-11-1	Show	GitHub Exploit DB Packet Storm

252934	7.5	危険	FamilyCMS	-	Family Connections Who is Chatting における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4988	2011-12-9 14:33	2011-11-1	Show	GitHub Exploit DB Packet Storm

252935	7.5	危険	Farsi CMS	-	Ziggurat Farsi CMS の main.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4989	2011-12-9 14:28	2011-11-1	Show	GitHub Exploit DB Packet Storm

252936	7.5	危険	B-Elektro	-	Joomla! 用 Front-edit Address Book コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4990	2011-12-9 14:28	2011-11-1	Show	GitHub Exploit DB Packet Storm

252937	7.5	危険	Ninja Forge	-	Joomla! 用 NinjaMonials コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4991	2011-12-9 14:27	2011-11-1	Show	GitHub Exploit DB Packet Storm

252938	7.5	危険	Payments Plus	-	Joomla! 用 Payments Plus コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4992	2011-12-9 14:26	2011-11-1	Show	GitHub Exploit DB Packet Storm

252939	7.5	危険	Kay Messerschmidt	-	Joomla! 用 eventcal コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4993	2011-12-9 14:26	2011-11-1	Show	GitHub Exploit DB Packet Storm

252940	7.5	危険	Instant Php	-	Joomla! 用 Jobs Pro コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4994	2011-12-9 14:25	2011-11-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208351	6.8	MEDIUM Network	xstream_project debian fedoraproject	xstream debian_linux fedora	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling. The vulnerabi…	-	CVE-2020-26259	2024-11-21 14:19	2020-12-16	Show	GitHub Exploit DB Packet Storm

208352	7.7	HIGH Network	xstream_project debian fedoraproject	xstream debian_linux fedora	XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be activated when unmarshalling. The vulnerabil…	-	CVE-2020-26258	2024-11-21 14:19	2020-12-16	Show	GitHub Exploit DB Packet Storm

208353	5.3	MEDIUM Network	wireshark fedoraproject debian oracle	wireshark fedora debian_linux zfs_storage_appliance_kit	Crash in USB HID protocol dissector and possibly other dissectors in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.	CWE-125 Out-of-bounds Read	CVE-2020-26421	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208354	5.3	MEDIUM Network	wireshark fedoraproject oracle	wireshark fedora zfs_storage_appliance_kit	Memory leak in RTPS protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-26420	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208355	5.3	MEDIUM Network	wireshark fedoraproject oracle	wireshark fedora zfs_storage_appliance_kit	Memory leak in the dissection engine in Wireshark 3.4.0 allows denial of service via packet injection or crafted capture file.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-26419	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208356	5.3	MEDIUM Network	wireshark fedoraproject debian oracle	wireshark fedora debian_linux zfs_storage_appliance_kit	Memory leak in Kafka protocol dissector in Wireshark 3.4.0 and 3.2.0 to 3.2.8 allows denial of service via packet injection or crafted capture file.	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-26418	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208357	5.3	MEDIUM Network	ethereum	go_ethereum	Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where…	CWE-682 Incorrect Calculation	CVE-2020-26265	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208358	6.5	MEDIUM Network	ethereum	go_ethereum	Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetPr…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-26264	2024-11-21 14:19	2020-12-12	Show	GitHub Exploit DB Packet Storm

208359	4.3	MEDIUM Network	gitlab	gitlab	A potential DOS vulnerability was discovered in all versions of Gitlab starting from 13.4.x (>=13.4 to <13.4.7, >=13.5 to <13.5.5, and >=13.6 to <13.6.2). Using a specific query name for a project se…	CWE-404 Improper Resource Shutdown or Release	CVE-2020-26411	2024-11-21 14:19	2020-12-11	Show	GitHub Exploit DB Packet Storm

208360	5.3	MEDIUM Network	gitlab	gitlab	Information disclosure via GraphQL in GitLab CE/EE 13.1 and later exposes private group and project membership. This affects versions >=13.6 to <13.6.2, >=13.5 to <13.5.5, and >=13.1 to <13.4.7.	CWE-200 Information Exposure	CVE-2020-26417	2024-11-21 14:19	2020-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed