Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253381 4.3 警告 サイバートラスト株式会社
Mozilla Foundation
レッドハット
オラクル		 - Mozilla Thunderbird/SeaMonkey における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-0163 2010-12-21 15:59 2010-03-16 Show GitHub Exploit DB Packet Storm
253382 9.3 危険 アップル
アドビシステムズ
レッドハット
オラクル		 - Adobe Flash に脆弱性 CWE-noinfo
情報不足 		CVE-2010-2884 2010-12-21 15:57 2010-09-15 Show GitHub Exploit DB Packet Storm
253383 6.9 警告 CVS
レッドハット		 - CVS の rcs.c 内にある apply_rcs_change 関数における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2010-3846 2010-12-21 15:30 2010-11-5 Show GitHub Exploit DB Packet Storm
253384 10 危険 RealFlex Technologies - RealFlex RealWin HMI サービスにバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4142 2010-12-21 15:25 2010-11-22 Show GitHub Exploit DB Packet Storm
253385 4.3 警告 Webmin Project
オラクル		 - Webmin および Usermin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4568 2010-12-21 15:14 2010-01-5 Show GitHub Exploit DB Packet Storm
253386 6.8 警告 富士通 - Interstage Application Server における許可されていない IP アドレスからのリクエストのアクセスを許可する脆弱性 CWE-noinfo
情報不足 		- 2010-12-21 14:14 2010-11-19 Show GitHub Exploit DB Packet Storm
253387 8.3 危険 日立 - 日立の Groupmax 関連製品におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		- 2010-12-21 14:06 2010-11-17 Show GitHub Exploit DB Packet Storm
253388 4.3 警告 The PHP Group
アップル
サイバートラスト株式会社
レッドハット		 - PHP の var_export 関数における、重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2531 2010-12-20 16:08 2010-07-22 Show GitHub Exploit DB Packet Storm
253389 4.6 警告 サイバートラスト株式会社
Linux
レッドハット		 - Hypervisor の命令のエミュレーションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-0435 2010-12-20 16:01 2010-08-19 Show GitHub Exploit DB Packet Storm
253390 5 警告 レッドハット
Pidgin
オラクル		 - Pidgin の MSN プロトコルプラグインの msn_emoticon_msg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1624 2010-12-20 16:00 2010-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209481 8.8 HIGH
Network 		j2store j2store The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager. CWE-89
SQL Injection 		CVE-2020-13996 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
209482 5.4 MEDIUM
Network 		your_online_shop_project your_online_shop Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation. CWE-79
Cross-site Scripting 		CVE-2020-13911 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
209483 8.8 HIGH
Adjacent 		royalapps royal_ts Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-13872 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
209484 5.4 MEDIUM
Network 		themeboy sportspress The SportsPress plugin before 2.7.2 for WordPress allows XSS. CWE-79
Cross-site Scripting 		CVE-2020-13892 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
209485 4.8 MEDIUM
Network 		opencart opencart OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists becau… CWE-79
Cross-site Scripting 		CVE-2020-13980 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
209486 7.2 HIGH
Network 		monstra monstra_cms Monstra CMS 3.0.4 allows an attacker, who already has administrative access to modify .chunk.php files on the Edit Chunk screen, to execute arbitrary OS commands via the Theme Module by visiting the … CWE-78
OS Command  		CVE-2020-13978 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
209487 4.9 MEDIUM
Network 		nagios
fedoraproject 		nagios
fedora 		Nagios 4.4.5 allows an attacker, who already has administrative access to change the "URL for JSON CGIs" configuration setting, to modify the Alert Histogram and Trends code via crafted versions of t… CWE-829
 Inclusion of Functionality from Untrusted Control Sphere 		CVE-2020-13977 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
209488 8.8 HIGH
Network 		dd-wrt dd-wrt An issue was discovered in DD-WRT through 16214. The Diagnostic page allows remote attackers to execute arbitrary commands via shell metacharacters in the host field of the ping command. Exploitation… CWE-78
OS Command  		CVE-2020-13976 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
209489 7.8 HIGH
Local 		linux
debian
canonical 		linux_kernel
debian_linux
ubuntu_linux 		An issue was discovered in the Linux kernel 4.4 through 5.7.1. drivers/tty/vt/keyboard.c has an integer overflow if k_ascii is called several times in a row, aka CID-b86dab054059. NOTE: Members in th… CWE-190
 Integer Overflow or Wraparound 		CVE-2020-13974 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm
209490 6.1 MEDIUM
Network 		owasp json-sanitizer OWASP json-sanitizer before 1.2.1 allows XSS. An attacker who controls a substring of the input JSON, and controls another substring adjacent to a SCRIPT element in which the output is embedded as Ja… CWE-79
Cross-site Scripting 		CVE-2020-13973 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm