Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255231 7.5 危険 Google - Android の PackageManagerService クラスにおけるアプリケーションのデータにアクセスされる脆弱性 CWE-287
不適切な認証 		CVE-2009-1754 2011-02-23 15:17 2009-05-26 Show GitHub Exploit DB Packet Storm
255232 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイス上で稼働する emWEB におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4677 2011-02-23 15:14 2011-01-7 Show GitHub Exploit DB Packet Storm
255233 6.8 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4676 2011-02-23 15:11 2011-01-7 Show GitHub Exploit DB Packet Storm
255234 9 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-4675 2011-02-23 15:09 2011-01-7 Show GitHub Exploit DB Packet Storm
255235 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4673 2011-02-23 15:05 2011-01-7 Show GitHub Exploit DB Packet Storm
255236 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-4672 2011-02-23 14:59 2011-01-7 Show GitHub Exploit DB Packet Storm
255237 5 警告 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-5037 2011-02-23 14:56 2011-01-7 Show GitHub Exploit DB Packet Storm
255238 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-4692 2011-02-23 14:54 2011-01-7 Show GitHub Exploit DB Packet Storm
255239 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-4691 2011-02-23 14:50 2011-01-7 Show GitHub Exploit DB Packet Storm
255240 5.1 警告 Lunascape - Lunascape における実行ファイル読み込みに関する脆弱性 CWE-Other
その他 		CVE-2011-0452 2011-02-23 14:01 2011-02-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208311 5.4 MEDIUM
Network 		qdpm qdpm The file upload functionality in qdPM 9.1 doesn't check the file description, which allows remote authenticated attackers to inject web script or HTML via the attachments info parameter, aka XSS. Thi… CWE-79
Cross-site Scripting 		CVE-2020-26166 2024-11-21 14:19 2020-10-5 Show GitHub Exploit DB Packet Storm
208312 6.1 MEDIUM
Network 		livehelperchat live_helper_chat Live Helper Chat before 3.44v allows reflected XSS via the setsettingajax PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2020-26135 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
208313 6.1 MEDIUM
Network 		livehelperchat live_helper_chat Live Helper Chat before 3.44v allows stored XSS in chat messages with an operator via BBCode. CWE-79
Cross-site Scripting 		CVE-2020-26134 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
208314 8.8 HIGH
Network 		openmediavault openmediavault openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.php, because json_encode_safe is not used in config/databas… CWE-94
Code Injection 		CVE-2020-26124 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
208315 5.5 MEDIUM
Local 		artifex
debian
fedoraproject 		mupdf
debian_linux
fedora 		Artifex MuPDF before 1.18.0 has a heap based buffer over-write when parsing JBIG2 files allowing attackers to cause a denial of service. CWE-787
 Out-of-bounds Write 		CVE-2020-26519 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
208316 9.8 CRITICAL
Network 		artica pandora_fms Artica Pandora FMS before 743 allows unauthenticated attackers to conduct SQL injection attacks via the pandora_console/include/chart_generator.php session_id parameter. CWE-89
SQL Injection 		CVE-2020-26518 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
208317 7.5 HIGH
Network 		wpo365 wordpress_\+_azure_ad_\/_microsoft_office_365 The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass. CWE-287
Improper Authentication 		CVE-2020-26511 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
208318 9.8 CRITICAL
Network 		websitebaker websitebaker WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access … CWE-89
SQL Injection 		CVE-2020-25990 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
208319 8.8 HIGH
Network 		bigbluebutton greenlight BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link. NVD-CWE-Other
CVE-2020-26163 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
208320 7.5 HIGH
Network 		jwt-go_project jwt-go jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fai… CWE-287
CWE-755
Improper Authentication
 Improper Handling of Exceptional Conditions 		CVE-2020-26160 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm