Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 3, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253821 | 1.9 | 注意 | Tembria | - | Tembria Server Monitor における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2011-3685 | 2011-10-3 14:54 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253822 | 4.3 | 警告 | Tembria | - | Tembria Server Monitor におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-3684 | 2011-10-3 14:52 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253823 | 7.5 | 危険 | Newgen Software Technologies Limited | - | Newgen OmniDocs におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-3645 | 2011-10-3 14:48 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253824 | 7.5 | 危険 | AliBabaClone.com | - | Alibaba Clone B2B の countrydetails.php におけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4849 | 2011-09-30 14:24 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253825 | 4.3 | 警告 | Diferior | - | Diferior におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4850 | 2011-09-30 14:22 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253826 | 7.5 | 危険 | Eclime | - | Eclime における複数の SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4851 | 2011-09-30 14:19 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253827 | 4.3 | 警告 | Eclime | - | Eclime の login.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4852 | 2011-09-30 14:15 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253828 | 7.5 | 危険 | Zoho Corporation | - | ManageEngine EventLog Analyzer の Syslog サーバにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-4840 | 2011-09-30 14:13 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253829 | 4.3 | 警告 | Zoho Corporation | - | ManageEngine EventLog Analyzer におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4841 | 2011-09-30 14:13 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
| 253830 | 4.3 | 警告 | AXScripts | - | AXScripts AxsLinks の addlink.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4848 | 2011-09-30 14:11 | 2011-09-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 3, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 202461 | 7.8 |
HIGH
Local |
mariadb | mariadb | mysql_install_db in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack … |
CWE-59
Link Following |
CVE-2020-7221 | 2024-11-21 14:36 | 2020-02-5 | Show | GitHub Exploit DB Packet Storm |
| 202462 | 7.5 |
HIGH
Network |
hashicorp | consul | HashiCorp Consul and Consul Enterprise up to 1.6.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 1.6.3. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2020-7219 | 2024-11-21 14:36 | 2020-01-31 | Show | GitHub Exploit DB Packet Storm |
| 202463 | 7.5 |
HIGH
Network |
hashicorp | nomad | HashiCorp Nomad and Nonad Enterprise up to 0.10.2 HTTP/RPC services allowed unbounded resource usage, and were susceptible to unauthenticated denial of service. Fixed in 0.10.3. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2020-7218 | 2024-11-21 14:36 | 2020-01-31 | Show | GitHub Exploit DB Packet Storm |
| 202464 | 9.8 |
CRITICAL
Network |
openbsd debian fedoraproject canonical |
opensmtpd debian_linux fedora ubuntu_linux |
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated … |
CWE-78 CWE-755 OS Command Improper Handling of Exceptional Conditions |
CVE-2020-7247 | 2024-11-21 14:36 | 2020-01-30 | Show | GitHub Exploit DB Packet Storm |
| 202465 | 7.5 |
HIGH
Network |
netty fedoraproject debian redhat |
netty fedora debian_linux jboss_enterprise_application_platform jboss_enterprise_application_platform_text-only_advisories openshift_application_runtimes_text-only_advisories |
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exi… |
CWE-444
HTTP Request Smuggling |
CVE-2020-7238 | 2024-11-21 14:36 | 2020-01-28 | Show | GitHub Exploit DB Packet Storm |
| 202466 | 6.5 |
MEDIUM
Network |
codesys |
control_for_beaglebone control_for_empc-a\/imx6 control_for_iot2000 control_for_linux control_for_plcnext control_for_pfc100 control_for_pfc200 control_for_raspberry_pi contro… |
CODESYS Control V3, Gateway V3, and HMI V3 before 3.5.15.30 allow uncontrolled memory allocation which can result in a remote denial of service condition. |
CWE-770
Allocation of Resources Without Limits or Throttling |
CVE-2020-7052 | 2024-11-21 14:36 | 2020-01-25 | Show | GitHub Exploit DB Packet Storm |
| 202467 | 10.0 |
CRITICAL
Network |
gehealthcare |
apexpro_telemetry_server_firmware carescape_central_station_mai700_firmware carescape_central_station_mas700_firmware clinical_information_center_mp100d_firmware clinical_information_cent… |
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the… |
CWE-326
Inadequate Encryption Strength |
CVE-2020-6966 | 2024-11-21 14:36 | 2020-01-25 | Show | GitHub Exploit DB Packet Storm |
| 202468 | 9.9 |
CRITICAL
Network |
gehealthcare |
apexpro_telemetry_server_firmware carescape_b450_monitor_firmware carescape_b650_monitor_firmware carescape_b850_monitor_firmware carescape_central_station_mai700_firmware carescape_ce… |
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, B45… |
CWE-20 CWE-434 Improper Input Validation Unrestricted Upload of File with Dangerous Type |
CVE-2020-6965 | 2024-11-21 14:36 | 2020-01-25 | Show | GitHub Exploit DB Packet Storm |
| 202469 | 8.6 |
HIGH
Network |
gehealthcare |
apexpro_telemetry_server_firmware carescape_central_station_mai700_firmware carescape_central_station_mas700_firmware clinical_information_center_mp100d_firmware clinical_information_cent… |
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X and … |
CWE-306
Missing Authentication for Critical Function |
CVE-2020-6964 | 2024-11-21 14:36 | 2020-01-25 | Show | GitHub Exploit DB Packet Storm |
| 202470 | 10.0 |
CRITICAL
Network |
gehealthcare |
apexpro_telemetry_server_firmware carescape_central_station_mai700_firmware carescape_central_station_mas700_firmware clinical_information_center_mp100d_firmware clinical_information_cent… |
In ApexPro Telemetry Server Versions 4.2 and prior, CARESCAPE Telemetry Server v4.2 & prior, Clinical Information Center (CIC) Versions 4.X and 5.X, CARESCAPE Central Station (CSCS) Versions 1.X, the… |
CWE-20 CWE-798 Improper Input Validation Use of Hard-coded Credentials |
CVE-2020-6963 | 2024-11-21 14:36 | 2020-01-25 | Show | GitHub Exploit DB Packet Storm |