Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253231 4.9 警告 キングソフト株式会社 - Kingsoft Internet Security 2011 におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2012-0321 2012-03-1 12:04 2012-03-1 Show GitHub Exploit DB Packet Storm
253232 7.5 危険 Hulihan Applications - Hulihan BXR の folder/list における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4963 2012-02-29 15:03 2010-07-22 Show GitHub Exploit DB Packet Storm
253233 7.5 危険 Dev-Team Typoheads - TYPO3 用 Webkit PDFs エクステンションにおける任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4962 2012-02-29 14:52 2011-10-9 Show GitHub Exploit DB Packet Storm
253234 7.5 危険 Dev-Team Typoheads - TYPO3 用 Webkit PDFs エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4961 2012-02-29 14:49 2011-10-9 Show GitHub Exploit DB Packet Storm
253235 4.3 警告 Martin Hesse - TYPO3 用 Branchenbuch エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4960 2012-02-29 14:43 2011-10-9 Show GitHub Exploit DB Packet Storm
253236 7.5 危険 PreProject.com - Pre Projects Pre Podcast Portal の login 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4959 2012-02-29 14:35 2011-10-9 Show GitHub Exploit DB Packet Storm
253237 7.5 危険 Prado Portal - Prado Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4958 2012-02-29 14:23 2011-10-9 Show GitHub Exploit DB Packet Storm
253238 7.5 危険 php-programs - APBoard Developers APBoard の board/board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4955 2012-02-29 14:06 2011-10-9 Show GitHub Exploit DB Packet Storm
253239 7.5 危険 Gambio - xt:Commerce Gambio 2008 の product_reviews_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4954 2012-02-29 14:05 2011-10-9 Show GitHub Exploit DB Packet Storm
253240 10 危険 Jens Witt - TYPO3 用 JW Calendar エクステンションにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4953 2012-02-29 11:55 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207741 7.5 HIGH
Network
gjson_project gjson GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON. NVD-CWE-noinfo
CVE-2020-36066 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
207742 5.3 MEDIUM
Network
veritas desktop_and_laptop_option Veritas Desktop and Laptop Option (DLO) before 9.5 disclosed operational information on the backup processing status through a URL that did not require authentication. NVD-CWE-noinfo
CVE-2020-36159 2024-11-21 14:28 2021-01-6 Show GitHub Exploit DB Packet Storm
207743 6.7 MEDIUM
Local
linux
fedoraproject
debian
netapp
linux_kernel
fedora
debian_linux
cloud_backup
solidfire_baseboard_management_controller_firmware
mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID… CWE-120
Classic Buffer Overflow
CVE-2020-36158 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
207744 9.8 CRITICAL
Network
ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Roles. Due to the lack of filtering on the role parameter that cou… NVD-CWE-noinfo
CVE-2020-36157 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
207745 8.8 HIGH
Network
ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-admin access to the profile.php page cou… CWE-269
 Improper Privilege Management
CVE-2020-36156 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
207746 9.8 CRITICAL
Network
ultimatemember ultimate_member An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive me… CWE-269
 Improper Privilege Management
CVE-2020-36155 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
207747 7.8 HIGH
Local
pearson vue_testing_system The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to obtain administrative… CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-36154 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
207748 9.8 CRITICAL
Network
cse_bookstore_project cse_bookstore CSE Bookstore version 1.0 is vulnerable to time-based blind, boolean-based blind and OR error-based SQL injection in pubid parameter in bookPerPub.php and in cart.php. A successful exploitation of th… CWE-89
SQL Injection
CVE-2020-36112 2024-11-21 14:28 2021-01-5 Show GitHub Exploit DB Packet Storm
207749 7.5 HIGH
Network
ffmpeg
debian
ffmpeg
debian_linux
decode_frame in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations. CWE-787
 Out-of-bounds Write
CVE-2020-35965 2024-11-21 14:28 2021-01-4 Show GitHub Exploit DB Packet Storm
207750 6.5 MEDIUM
Network
ffmpeg ffmpeg track_header in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing. CWE-787
 Out-of-bounds Write
CVE-2020-35964 2024-11-21 14:28 2021-01-4 Show GitHub Exploit DB Packet Storm