Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255571	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の nsGenericDOMDataNode::SetTextInternal 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1196	2011-01-5 14:39	2010-06-22	Show	GitHub Exploit DB Packet Storm

255572	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品の nsCycleCollector::MarkRoots 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0183	2011-01-5 14:19	2010-06-22	Show	GitHub Exploit DB Packet Storm

255573	7.5	危険	レッドハット	-	Red Hat Enterprise MRG の Management Console における任意のジョブを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4179	2011-01-4 16:28	2010-11-30	Show	GitHub Exploit DB Packet Storm

255574	7.8	危険	シスコシステムズ	-	複数の CIsco 製品上で稼働する remote-access IPSec VPN の実装における有効なグループ名を列挙される脆弱性	CWE-399 リソース管理の問題	CVE-2010-4354	2011-01-4 16:18	2010-09-22	Show	GitHub Exploit DB Packet Storm

255575	4	警告	Pidgin オラクル	-	Pidgin の libpurple 内にある oscar プロトコルプラグインの clientautoresp 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2528	2011-01-4 16:14	2010-07-30	Show	GitHub Exploit DB Packet Storm

255576	7.2	危険	VMware	-	複数の VMware 製品の VMware-Tools アップデート機能における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4297	2010-12-27 15:40	2010-12-2	Show	GitHub Exploit DB Packet Storm

255577	7.2	危険	VMware	-	複数の VMware 製品の vmware-mount における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4296	2010-12-27 15:38	2010-12-2	Show	GitHub Exploit DB Packet Storm

255578	6.9	警告	VMware	-	複数の VMware 製品の vmware-mount における権限昇格の脆弱性	CWE-362 競合状態	CVE-2010-4295	2010-12-27 15:36	2010-12-2	Show	GitHub Exploit DB Packet Storm

255579	9.3	危険	VMware	-	複数の VMware 製品の VMnc メディアコーデック内にあるフレーム復元機能における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4294	2010-12-27 15:33	2010-12-2	Show	GitHub Exploit DB Packet Storm

255580	2.1	注意	アップル	-	Windows 上で稼働する Apple QuickTime における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0530	2010-12-27 15:07	2010-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215821	6.1	MEDIUM Network	app2pro	airdisk_pro	The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo).	CWE-79 Cross-site Scripting	CVE-2020-12131	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215822	5.3	MEDIUM Network	postfix	postfix	A certain Postfix 2.10.1-7 package could allow an attacker to send an email from an arbitrary-looking sender via a homoglyph attack, as demonstrated by the similarity of \xce\xbf to the 'o' character…	NVD-CWE-Other	CVE-2020-12063	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215823	6.1	MEDIUM Network	app2pro	airdisk_pro	The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.	CWE-79 Cross-site Scripting	CVE-2020-12130	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215824	6.1	MEDIUM Network	app2pro	airdisk_pro	The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function.	CWE-79 Cross-site Scripting	CVE-2020-12129	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215825	7.5	HIGH Network	file_transfer_ifamily_project	file_transfer_ifamily	DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path.	CWE-22 Path Traversal	CVE-2020-12128	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215826	8.2	HIGH Network	binance	tss-lib	The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to compromise a signing round or obtain sensitive information fro…	CWE-276 Incorrect Default Permissions	CVE-2020-12118	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215827	6.1	MEDIUM Network	bigbluebutton	bigbluebutton	BigBlueButton before 2.2.4 allows XSS via closed captions because dangerouslySetInnerHTML in React is used.	CWE-79 Cross-site Scripting	CVE-2020-12113	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215828	7.5	HIGH Network	bigbluebutton	bigbluebutton	BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion.	CWE-22 Path Traversal	CVE-2020-12112	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215829	5.9	MEDIUM Network	infradead opensuse	openconnect leap	OpenConnect through 8.08 mishandles negative return values from X509_check_ function calls, which might assist attackers in performing man-in-the-middle attacks.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2020-12105	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

215830	6.1	MEDIUM Network	catchplugins	catch_breadcrumb	The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist …	CWE-79 Cross-site Scripting	CVE-2020-12054	2024-11-21 13:59	2020-04-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed