Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256351 2.6 注意 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1985 2010-05-12 12:01 2010-05-12 Show GitHub Exploit DB Packet Storm
256352 10 危険 日立 - 複数の EUR Form 製品 および EUR 製品における任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		- 2010-05-11 15:16 2010-03-31 Show GitHub Exploit DB Packet Storm
256353 6.4 警告 マイクロソフト - Microsoft Windows における ISATAP パケットの処理に関する IPv4 ソースアドレスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0812 2010-05-11 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
256354 7.6 危険 マイクロソフト - Microsoft Office Visio における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0256 2010-05-11 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
256355 7.6 危険 マイクロソフト - Microsoft Office Visio における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0254 2010-05-11 15:15 2010-04-13 Show GitHub Exploit DB Packet Storm
256356 5 警告 マイクロソフト - Microsoft Windows の SMTP コンポーネントにおける情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2010-0025 2010-05-11 15:15 2010-04-13 Show GitHub Exploit DB Packet Storm
256357 5 警告 マイクロソフト - Microsoft Windows の SMTP コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0024 2010-05-11 15:15 2010-04-13 Show GitHub Exploit DB Packet Storm
256358 9.3 危険 マイクロソフト - Microsoft Office Publisher におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0479 2010-05-11 15:14 2010-04-13 Show GitHub Exploit DB Packet Storm
256359 4.7 警告 マイクロソフト - Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2010-0810 2010-05-11 15:14 2010-04-13 Show GitHub Exploit DB Packet Storm
256360 4.7 警告 マイクロソフト - Microsoft Windows の kernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0482 2010-05-11 15:14 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213151 9.8 CRITICAL
Network 		advantech webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to overwrite files outside the application… CWE-22
Path Traversal 		CVE-2020-12006 2024-11-21 13:59 2020-05-8 Show GitHub Exploit DB Packet Storm
213152 9.8 CRITICAL
Network 		advantech webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple stack-based buffer overflow vulnerabilities exist caused by a lack of proper validation of the length of user-supplied data,… CWE-787
 Out-of-bounds Write 		CVE-2020-12002 2024-11-21 13:59 2020-05-8 Show GitHub Exploit DB Packet Storm
213153 7.5 HIGH
Network 		zohocorp manageengine_opmanager Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the server by sending a crafted request. CWE-22
Path Traversal 		CVE-2020-12116 2024-11-21 13:59 2020-05-8 Show GitHub Exploit DB Packet Storm
213154 7.8 HIGH
Local 		solarwinds managed_service_provider_patch_management_engine An issue was discovered in SolarWinds MSP PME (Patch Management Engine) Cache Service before 1.1.15 in the Advanced Monitoring Agent. There are insecure file permissions for %PROGRAMDATA%\SolarWinds … CWE-276
Incorrect Default Permissions  		CVE-2020-12608 2024-11-21 13:59 2020-05-8 Show GitHub Exploit DB Packet Storm
213155 5.3 MEDIUM
Network 		gitlab gitlab GitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via NuGet. CWE-22
Path Traversal 		CVE-2020-12448 2024-11-21 13:59 2020-05-8 Show GitHub Exploit DB Packet Storm
213156 6.5 MEDIUM
Network 		gnu
debian
fedoraproject
opensuse
canonical 		mailman
debian_linux
fedora
leap
backports_sle
ubuntu_linux 		/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CWE-74
Injection 		CVE-2020-12108 2024-11-21 13:59 2020-05-7 Show GitHub Exploit DB Packet Storm
213157 7.8 HIGH
Local 		avira software_updater An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary fil… NVD-CWE-noinfo
CVE-2020-12463 2024-11-21 13:59 2020-05-6 Show GitHub Exploit DB Packet Storm
213158 5.3 MEDIUM
Network 		grin grin Grin before 3.1.0 allows attackers to adversely affect availability of data on a Mimblewimble blockchain. CWE-404
 Improper Resource Shutdown or Release 		CVE-2020-12439 2024-11-21 13:59 2020-05-6 Show GitHub Exploit DB Packet Storm
213159 4.9 MEDIUM
Network 		silver-peak unity_edgeconnect_for_google_cloud_platform
unity_edgeconnect_for_azure
unity_edgeconnect_for_amazon_web_services
unity_orchestrator
vx-500_firmware
vx-1000_firmware
vx-2000_firmwar… 		The certificate used to identify the Silver Peak Cloud Portal to EdgeConnect devices is not validated. This makes it possible for someone to establish a TLS connection from EdgeConnect to an untruste… CWE-295
Improper Certificate Validation  		CVE-2020-12144 2024-11-21 13:59 2020-05-6 Show GitHub Exploit DB Packet Storm
213160 4.9 MEDIUM
Network 		silver-peak unity_edgeconnect_for_google_cloud_platform
unity_edgeconnect_for_azure
unity_edgeconnect_for_amazon_web_services
unity_orchestrator
vx-500_firmware
vx-1000_firmware
vx-2000_firmwar… 		The certificate used to identify Orchestrator to EdgeConnect devices is not validated, which makes it possible for someone to establish a TLS connection from EdgeConnect to an untrusted Orchestrator. CWE-295
Improper Certificate Validation  		CVE-2020-12143 2024-11-21 13:59 2020-05-6 Show GitHub Exploit DB Packet Storm