Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253161 7.5 危険 ヒューレット・パッカード - HP Operations Agent における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-3004 2012-03-27 18:42 2010-09-2 Show GitHub Exploit DB Packet Storm
253162 4.3 警告 ヒューレット・パッカード - HP Insight Diagnostics Online Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3003 2012-03-27 18:42 2010-08-30 Show GitHub Exploit DB Packet Storm
253163 6.2 警告 Linux - Linux kernel の drivers/media/video/v4l2-compat-ioctl32.c における任意のカーネルメモリロケーションに書き込まれる脆弱性 CWE-20
不適切な入力確認
CVE-2010-2963 2012-03-27 18:42 2010-11-26 Show GitHub Exploit DB Packet Storm
253164 6.9 警告 scott james remnant - mountall の mountall.c における権限を取得される脆弱性 CWE-362
競合状態
CVE-2010-2961 2012-03-27 18:42 2010-09-14 Show GitHub Exploit DB Packet Storm
253165 7.2 危険 Linux - Linux kernel の keyctl_session_to_parent 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-2960 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
253166 7.2 危険 Linux - Linux kernel の net/can/bcm.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-2959 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
253167 4.3 警告 The phpMyAdmin Project - phpMyAdmin の libraries/Error.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2958 2012-03-27 18:42 2010-08-30 Show GitHub Exploit DB Packet Storm
253168 2.6 注意 s9y - Serendipity におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2957 2012-03-27 18:42 2010-08-27 Show GitHub Exploit DB Packet Storm
253169 6.9 警告 Apache Software Foundation - Debian GNU/Linux の CouchDB における権限昇格の脆弱性 CWE-Other
その他
CVE-2010-2953 2012-03-27 18:42 2010-09-9 Show GitHub Exploit DB Packet Storm
253170 4.3 警告 Apache Software Foundation - Apache Traffic Server における内部 DNS キャッシュポイズニングの脆弱性 CWE-20
不適切な入力確認
CVE-2010-2952 2012-03-27 18:42 2010-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
219661 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn533a8_firmware
wn551k1_firmware
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configurati… CWE-306
Missing Authentication for Critical Function
CVE-2020-10973 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
219662 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn572hg3_firmware
An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a ce… CWE-306
CWE-522
Missing Authentication for Critical Function
 Insufficiently Protected Credentials
CVE-2020-10972 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
219663 8.8 HIGH
Network
wavlink wl-wn575a3_firmware
wl-wn530hg4_firmware
wl-wn579g3_firmware
An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the… CWE-20
 Improper Input Validation 
CVE-2020-10971 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
219664 5.4 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with conte… CWE-79
Cross-site Scripting
CVE-2020-11036 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
219665 9.3 CRITICAL
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values.… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-11035 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
219666 6.1 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6. CWE-601
Open Redirect
CVE-2020-11034 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
219667 7.2 HIGH
Network
glpi-project glpi In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6. CWE-89
SQL Injection
CVE-2020-11032 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
219668 6.5 MEDIUM
Network
zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request. CWE-22
Path Traversal
CVE-2020-10859 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
219669 7.2 HIGH
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI from version 9.1 and before version 9.4.6, any API user with READ right on User itemtype will have access to full list of users when querying apirest.php/User. The response contains: - All ap… CWE-200
Information Exposure
CVE-2020-11033 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
219670 4.8 MEDIUM
Network
requarks wiki.js In Wiki.js before 2.3.81, there is a stored XSS in the Markdown editor. An editor with write access to a page, using the Markdown editor, could inject an XSS payload into the content. If another edit… CWE-79
Cross-site Scripting
CVE-2020-11051 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm