Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
256721 5 警告 日立 - Groupmax World Wide Web Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2010-06-14 16:24 2010-05-26 Show GitHub Exploit DB Packet Storm
256722 4.3 警告 日立 - Hitachi Web Server の SSL クライアント認証における CRL 失効確認不可の脆弱性 CWE-287
不適切な認証 		- 2010-06-14 16:24 2010-05-17 Show GitHub Exploit DB Packet Storm
256723 5 警告 日立 - TP1/Message Control におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		- 2010-06-14 16:23 2010-05-17 Show GitHub Exploit DB Packet Storm
256724 10 危険 日立
CA Technologies		 - CA XOsoft におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1223 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
256725 5 警告 日立
CA Technologies		 - CA XOsoft における重要な情報を取得される脆弱性 CWE-287
不適切な認証 		CVE-2010-1222 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
256726 5 警告 日立
CA Technologies		 - CA XOsoft におけるユーザ名を列挙される脆弱性 CWE-287
不適切な認証 		CVE-2010-1221 2010-06-14 16:23 2010-04-6 Show GitHub Exploit DB Packet Storm
256727 6.8 警告 フェンリル株式会社 - ActiveGeckoBrowser における複数の脆弱性 CWE-Other
その他 		CVE-2010-2420 2010-06-14 12:01 2010-06-14 Show GitHub Exploit DB Packet Storm
256728 6.8 警告 サン・マイクロシステムズ
GNU Project
ターボリナックス
サイバートラスト株式会社
レッドハット		 - GNU tar および GNU cpio の rmt_read__ 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0624 2010-06-11 18:45 2010-03-15 Show GitHub Exploit DB Packet Storm
256729 3.5 注意 PostgreSQL.org
サイバートラスト株式会社
レッドハット		 - PostgreSQL における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0733 2010-06-9 16:54 2010-03-19 Show GitHub Exploit DB Packet Storm
256730 6.5 警告 PostgreSQL.org
サイバートラスト株式会社
レッドハット		 - PostgreSQL の bitsubstr 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-0442 2010-06-9 16:54 2010-02-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208271 6.5 MEDIUM
Network 		jetbrains ktor In JetBrains Ktor before 1.4.1, HTTP request smuggling was possible. CWE-444
HTTP Request Smuggling 		CVE-2020-26129 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
208272 9.8 CRITICAL
Network 		user_registration_\&_login_and_user_management_system_project user_registration_\&_login_and_user_management_system SQL injection vulnerability in PHPGurukul User Registration & Login and User Management System With admin panel 2.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication. CWE-89
SQL Injection 		CVE-2020-25952 2024-11-21 14:19 2020-11-17 Show GitHub Exploit DB Packet Storm
208273 6.5 MEDIUM
Network 		spreecommerce spree Spree is a complete open source e-commerce solution built with Ruby on Rails. In Spree from version 3.7 and before versions 3.7.13, 4.0.5, and 4.1.12, there is an authorization bypass vulnerability. … - CVE-2020-26223 2024-11-21 14:19 2020-11-14 Show GitHub Exploit DB Packet Storm
208274 5.3 MEDIUM
Network 		radarcovid radar-covid-backend-dp3t-server
radarcovid 		Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymization of COVID-19 positive users that upload Radar COVID T… - CVE-2020-26230 2024-11-21 14:19 2020-11-14 Show GitHub Exploit DB Packet Storm
208275 8.8 HIGH
Network 		dependabot_project dependabot Dependabot is a set of packages for automated dependency management for Ruby, JavaScript, Python, PHP, Elixir, Rust, Java, .NET, Elm and Go. In Dependabot-Core from version 0.119.0.beta1 before versi… - CVE-2020-26222 2024-11-21 14:19 2020-11-14 Show GitHub Exploit DB Packet Storm
208276 6.1 MEDIUM
Network 		touchbase.ai_project touchbase.ai touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting (XSS). The vulnerability allows an attacker to send malicious JavaScript code which could result in hijacking of the user's cooki… - CVE-2020-26221 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
208277 3.5 LOW
Network 		touchbase.ai_project touchbase.ai toucbase.ai before version 2.0 leaks information by not stripping exif data from images. Anyone with access to the uploaded image of other users could obtain its geolocation, device, and software ver… - CVE-2020-26220 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
208278 6.1 MEDIUM
Network 		touchbase.ai_project touchbase.ai touchbase.ai before version 2.0 is vulnerable to Open Redirect. Impacts can be many, and vary from theft of information and credentials, to the redirection to malicious websites containing attacker-c… - CVE-2020-26219 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
208279 6.1 MEDIUM
Network 		touchbase.ai_project touchbase.ai touchbase.ai before version 2.0 is vulnerable to Cross-Site Scripting. The vulnerability allows an attacker to inject HTML payloads which could result in defacement, user redirection to a malicious w… - CVE-2020-26218 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm
208280 8.6 HIGH
Network 		cisco ios_xr A vulnerability in the ingress packet processing function of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to cause a de… CWE-404
 Improper Resource Shutdown or Release 		CVE-2020-26070 2024-11-21 14:19 2020-11-12 Show GitHub Exploit DB Packet Storm