Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
255631 1.9 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の find_keyring_by_name 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2010-1437 2011-03-3 13:34 2010-05-7 Show GitHub Exploit DB Packet Storm
255632 2.1 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の ebtables モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-0007 2011-03-3 13:33 2010-01-19 Show GitHub Exploit DB Packet Storm
255633 5.4 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の print_fatal_signal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-200
情報漏えい
CVE-2010-0003 2011-03-3 13:32 2010-01-26 Show GitHub Exploit DB Packet Storm
255634 7.8 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux Kernel の The ip6_dst_lookup_tail 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2010-0437 2011-03-3 13:31 2010-03-16 Show GitHub Exploit DB Packet Storm
255635 10 危険 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の NFS サーバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-2521 2011-03-3 13:30 2010-05-12 Show GitHub Exploit DB Packet Storm
255636 4.4 警告 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の DNS resolution 機能における任意の CIFS マウントを実行される脆弱性 CWE-DesignError
CVE-2010-2524 2011-03-3 13:29 2010-08-1 Show GitHub Exploit DB Packet Storm
255637 1.9 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の xfs_swapext 関数における読み込み権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2010-2226 2011-03-3 13:28 2010-08-1 Show GitHub Exploit DB Packet Storm
255638 1.9 注意 サイバートラスト株式会社
VMware
Linux
レッドハット
- Linux kernel の mext_check_arguments 関数におけるファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2066 2011-03-3 13:26 2010-06-2 Show GitHub Exploit DB Packet Storm
255639 6.5 警告 IBM - IBM DB2 における non-DDL ステートメントを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-0757 2011-03-2 16:40 2011-01-28 Show GitHub Exploit DB Packet Storm
255640 4.3 警告 シングス - 複数のシングス CGI 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-0455 2011-03-2 16:01 2011-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
217921 5.9 MEDIUM
Network
freerdp
debian
canonical
freerdp
debian_linux
ubuntu_linux
In FreeRDP greater than 1.1 and before 2.0.0, there is an out-of-bounds read in update_read_icon_info. It allows reading a attacker-defined amount of client memory (32bit unsigned -> 4GB) to an inter… - CVE-2020-11042 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
217922 7.5 HIGH
Network
wavlink wl-wn575a3_firmware
wl-wn579g3_firmware
wn531a6_firmware
wn535g3_firmware
wn530h4_firmware
wn57x93_firmware
wn572hg3_firmware
wn575a4_firmware
wn578a2_firmware
wn579g3_firm…
An issue was discovered affecting a backup feature where a crafted POST request returns the current configuration of the device in cleartext, including the administrator password. No authentication i… CWE-306
Missing Authentication for Critical Function
CVE-2020-10974 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
217923 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn533a8_firmware
wn551k1_firmware
An issue was discovered in Wavlink WN530HG4, Wavlink WN531G3, Wavlink WN533A8, and Wavlink WN551K1 affecting /cgi-bin/ExportAllSettings.sh where a crafted POST request returns the current configurati… CWE-306
Missing Authentication for Critical Function
CVE-2020-10973 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
217924 7.5 HIGH
Network
wavlink wn530hg4_firmware
wn531g3_firmware
wn572hg3_firmware
An issue was discovered where a page is exposed that has the current administrator password in cleartext in the source code of the page. No authentication is required in order to reach the page (a ce… CWE-306
CWE-522
Missing Authentication for Critical Function
 Insufficiently Protected Credentials
CVE-2020-10972 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
217925 8.8 HIGH
Network
wavlink wl-wn575a3_firmware
wl-wn530hg4_firmware
wl-wn579g3_firmware
An issue was discovered on Wavlink Jetstream devices where a crafted POST request can be sent to adm.cgi that will result in the execution of the supplied command if there is an active session at the… CWE-20
 Improper Input Validation 
CVE-2020-10971 2024-11-21 13:56 2020-05-8 Show GitHub Exploit DB Packet Storm
217926 5.4 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6 there are multiple related stored XSS vulnerabilities. The package is vulnerable to Stored XSS in the comments of items in the Knowledge base. Adding a comment with conte… CWE-79
Cross-site Scripting
CVE-2020-11036 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
217927 9.3 CRITICAL
Network
glpi-project
fedoraproject
glpi
fedora
In GLPI after version 0.83.3 and before version 9.4.6, the CSRF tokens are generated using an insecure algorithm. The implementation uses rand and uniqid and MD5 which does not provide secure values.… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-11035 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
217928 6.1 MEDIUM
Network
glpi-project glpi In GLPI before version 9.4.6, there is a vulnerability that allows bypassing the open redirect protection based which is based on a regexp. This is fixed in version 9.4.6. CWE-601
Open Redirect
CVE-2020-11034 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
217929 7.2 HIGH
Network
glpi-project glpi In GLPI before version 9.4.6, there is a SQL injection vulnerability for all helpdesk instances. Exploiting this vulnerability requires a technician account. This is fixed in version 9.4.6. CWE-89
SQL Injection
CVE-2020-11032 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm
217930 6.5 MEDIUM
Network
zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request. CWE-22
Path Traversal
CVE-2020-10859 2024-11-21 13:56 2020-05-6 Show GitHub Exploit DB Packet Storm