Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257251 5 警告 Linux
レッドハット
- Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0741 2010-04-21 17:48 2010-03-30 Show GitHub Exploit DB Packet Storm
257252 6.9 警告 mielke
レッドハット
- brltty の libbrlttybba.so における権限昇格の脆弱性 CWE-264
CWE-Other
CVE-2008-3279 2010-04-21 17:47 2010-03-30 Show GitHub Exploit DB Packet Storm
257253 4.3 警告 Mozilla Foundation - Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-0181 2010-04-20 16:42 2010-03-30 Show GitHub Exploit DB Packet Storm
257254 5.8 警告 サイボウズ - 複数のサイボウズ製品におけるアクセス制限に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2029 2010-04-20 12:01 2010-04-20 Show GitHub Exploit DB Packet Storm
257255 9.3 危険 マイクロソフト - Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0805 2010-04-19 19:20 2010-03-30 Show GitHub Exploit DB Packet Storm
257256 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2010-0491 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
257257 4.3 警告 マイクロソフト - Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい
CVE-2010-0494 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
257258 9.3 危険 マイクロソフト - Microsoft Internet Explorer の mstime.dll における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0492 2010-04-19 19:19 2010-03-30 Show GitHub Exploit DB Packet Storm
257259 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0490 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
257260 9.3 危険 マイクロソフト - Microsoft Internet Explorer における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-0807 2010-04-19 19:18 2010-03-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215331 7.5 HIGH
Network
meetecho janus An issue was discovered in janus-gateway (aka Janus WebRTC Server) through 0.10.0. janus_sdp_process in sdp.c has a NULL pointer dereference. CWE-476
 NULL Pointer Dereference
CVE-2020-13898 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
215332 7.8 HIGH
Local
irfanview irfanview IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038eb7. NVD-CWE-noinfo
CVE-2020-13906 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
215333 8.8 HIGH
Network
irfanview irfanview IrfanView 4.54 allows a user-mode write access violation starting at FORMATS!GetPlugInInfo+0x0000000000038ed4. NVD-CWE-noinfo
CVE-2020-13905 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
215334 5.4 MEDIUM
Network
enhancesoft osticket scp/categories.php in osTicket 1.14.2 allows XSS via a Knowledgebase Category Name or Category Description. The attacker must be an Agent. CWE-79
Cross-site Scripting
CVE-2020-14012 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
215335 6.1 MEDIUM
Network
laborator xenon The Laborator Xenon theme 1.3 for WordPress allows Reflected XSS via the data/typeahead-generate.php q (aka name) parameter. CWE-79
Cross-site Scripting
CVE-2020-14010 2024-11-21 14:02 2020-06-11 Show GitHub Exploit DB Packet Storm
215336 8.8 HIGH
Network
j2store j2store The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager. CWE-89
SQL Injection
CVE-2020-13996 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
215337 5.4 MEDIUM
Network
your_online_shop_project your_online_shop Your Online Shop 1.8.0 allows authenticated users to trigger XSS via a Change Name or Change Surname operation. CWE-79
Cross-site Scripting
CVE-2020-13911 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
215338 8.8 HIGH
Adjacent
royalapps royal_ts Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach. CWE-307
mproper Restriction of Excessive Authentication Attempts
CVE-2020-13872 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
215339 5.4 MEDIUM
Network
themeboy sportspress The SportsPress plugin before 2.7.2 for WordPress allows XSS. CWE-79
Cross-site Scripting
CVE-2020-13892 2024-11-21 14:02 2020-06-10 Show GitHub Exploit DB Packet Storm
215340 4.8 MEDIUM
Network
opencart opencart OpenCart 3.0.3.3 allows remote authenticated users to conduct XSS attacks via a crafted filename in the users' image upload section because of a lack of entity encoding. NOTE: this issue exists becau… CWE-79
Cross-site Scripting
CVE-2020-13980 2024-11-21 14:02 2020-06-9 Show GitHub Exploit DB Packet Storm