Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
253761 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3242 2010-10-28 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
253762 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3241 2010-10-28 16:33 2010-10-12 Show GitHub Exploit DB Packet Storm
253763 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3239 2010-10-28 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
253764 9.3 危険 マイクロソフト - Microsoft Excel および Microsoft Office における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3237 2010-10-28 16:32 2010-10-12 Show GitHub Exploit DB Packet Storm
253765 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3235 2010-10-27 15:17 2010-10-12 Show GitHub Exploit DB Packet Storm
253766 9.3 危険 マイクロソフト - Microsoft Excel における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3234 2010-10-27 15:17 2010-10-12 Show GitHub Exploit DB Packet Storm
253767 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2010-3231 2010-10-27 15:16 2010-10-12 Show GitHub Exploit DB Packet Storm
253768 9.3 危険 マイクロソフト - Microsoft Excel における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-3230 2010-10-27 15:16 2010-10-12 Show GitHub Exploit DB Packet Storm
253769 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-94
コード・インジェクション
CVE-2010-3221 2010-10-27 15:16 2010-10-12 Show GitHub Exploit DB Packet Storm
253770 9.3 危険 マイクロソフト - 複数の Microsoft 製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3214 2010-10-27 15:15 2010-10-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209551 8.8 HIGH
Network
rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in "global_lists/choices" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An attack… CWE-89
SQL Injection
CVE-2020-13592 2024-11-21 14:01 2021-04-10 Show GitHub Exploit DB Packet Storm
209552 8.8 HIGH
Network
rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the "access_rules/rules_form" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. An… CWE-89
SQL Injection
CVE-2020-13591 2024-11-21 14:01 2021-04-10 Show GitHub Exploit DB Packet Storm
209553 8.8 HIGH
Network
rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the "forms_fields_rules/rules" page of the Rukovoditel Project Management App 2.7.2. A specially crafted HTTP request can lead to SQL injection. A… CWE-89
SQL Injection
CVE-2020-13587 2024-11-21 14:01 2021-04-10 Show GitHub Exploit DB Packet Storm
209554 7.8 HIGH
Local
dreamreport dream_report A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges w… CWE-276
Incorrect Default Permissions 
CVE-2020-13534 2024-11-21 14:01 2021-04-10 Show GitHub Exploit DB Packet Storm
209555 7.8 HIGH
Local
dreamreport dream_report A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attac… CWE-276
Incorrect Default Permissions 
CVE-2020-13533 2024-11-21 14:01 2021-04-10 Show GitHub Exploit DB Packet Storm
209556 7.8 HIGH
Local
dreamreport dream_report A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges … CWE-276
Incorrect Default Permissions 
CVE-2020-13532 2024-11-21 14:01 2021-04-10 Show GitHub Exploit DB Packet Storm
209557 8.1 HIGH
Network
openiam openiam OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions. CWE-862
 Missing Authorization
CVE-2020-13422 2024-11-21 14:01 2021-04-7 Show GitHub Exploit DB Packet Storm
209558 9.8 CRITICAL
Network
openiam openiam OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions. NVD-CWE-Other
CVE-2020-13421 2024-11-21 14:01 2021-04-7 Show GitHub Exploit DB Packet Storm
209559 9.8 CRITICAL
Network
openiam openiam OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script. NVD-CWE-noinfo
CVE-2020-13420 2024-11-21 14:01 2021-04-7 Show GitHub Exploit DB Packet Storm
209560 5.3 MEDIUM
Network
openiam openiam OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task. CWE-22
Path Traversal
CVE-2020-13419 2024-11-21 14:01 2021-04-7 Show GitHub Exploit DB Packet Storm