Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257481	6.4	警告	アップル	-	Apple Mac OS X の libsecurity における SSL サーバになりすまされる脆弱性	CWE-287 不適切な認証	CVE-2010-1802	2010-09-8 15:52	2010-08-25	Show	GitHub Exploit DB Packet Storm

257482	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1801	2010-09-8 15:52	2010-08-25	Show	GitHub Exploit DB Packet Storm

257483	5	警告	アップル ClamAV	-	ClamAV の libclamav/mspack.c における qtm_decompress 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-1311	2010-09-8 15:52	2010-04-8	Show	GitHub Exploit DB Packet Storm

257484	5	警告	アップル	-	Apple Mac OS X の CFNetwork における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1800	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

257485	6.8	警告	アップル	-	Apple Mac OS X の Apple Type Services におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-1808	2010-09-8 15:51	2010-08-25	Show	GitHub Exploit DB Packet Storm

257486	6.2	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo の secure path 機能における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1646	2010-09-8 15:50	2010-06-7	Show	GitHub Exploit DB Packet Storm

257487	6.9	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1163	2010-09-8 15:50	2010-04-16	Show	GitHub Exploit DB Packet Storm

257488	10	危険	ESET アップル ClamAV ソースネクスト	-	複数のアンチウィルス製品に脆弱性	CWE-noinfo 情報不足	CVE-2010-0098	2010-09-8 15:50	2010-04-13	Show	GitHub Exploit DB Packet Storm

257489	7.5	危険	The PHP Group アップル	-	PHP の safe_mode 実装におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1129	2010-09-8 15:49	2010-03-26	Show	GitHub Exploit DB Packet Storm

257490	4.4	警告	サイバートラスト株式会社 Todd C. Miller ターボリナックスレッドハット	-	sudo における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0427	2010-09-8 15:49	2010-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210941	8.8	HIGH Network	quadbase	espressreports_es	An issue was discovered in Quadbase EspressReports ES 7 Update 9. An unauthenticated attacker can create a malicious HTML file that houses a POST request made to the DashboardBuilder within the targe…	CWE-352 Origin Validation Error	CVE-2020-24983	2024-11-21 14:16	2021-03-12	Show	GitHub Exploit DB Packet Storm

210942	9.8	CRITICAL Network	thedaylightstudio	fuel_cms	FUEL CMS 1.4.8 allows SQL injection via the 'fuel_replace_id' parameter in pages/replace/1. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or expl…	CWE-89 SQL Injection	CVE-2020-24791	2024-11-21 14:16	2021-03-10	Show	GitHub Exploit DB Packet Storm

210943	9.8	CRITICAL Network	qcubed	qcubed	A PHP object injection bug in profile.php in qcubed (all versions including 3.1.1) unserializes the untrusted data of the POST-variable "strProfileData" and allows an unauthenticated attacker to exec…	CWE-502 Deserialization of Untrusted Data	CVE-2020-24914	2024-11-21 14:16	2021-03-4	Show	GitHub Exploit DB Packet Storm

210944	9.8	CRITICAL Network	qcubed	qcubed	A SQL injection vulnerability in qcubed (all versions including 3.1.1) in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a …	CWE-89 SQL Injection	CVE-2020-24913	2024-11-21 14:16	2021-03-4	Show	GitHub Exploit DB Packet Storm

210945	6.1	MEDIUM Network	qcubed	qcubed	A reflected cross-site scripting (XSS) vulnerability in qcubed (all versions including 3.1.1) in profile.php via the stQuery-parameter allows unauthenticated attackers to steal sessions of authentica…	CWE-79 Cross-site Scripting	CVE-2020-24912	2024-11-21 14:16	2021-03-4	Show	GitHub Exploit DB Packet Storm

210946	7.8	HIGH Local	checkmk	checkmk	Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory.	NVD-CWE-Other	CVE-2020-24908	2024-11-21 14:16	2021-02-19	Show	GitHub Exploit DB Packet Storm

210947	9.8	CRITICAL Network	sdg	pnpscada	PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit late…	CWE-89 SQL Injection	CVE-2020-24841	2024-11-21 14:16	2021-02-16	Show	GitHub Exploit DB Packet Storm

210948	8.8	HIGH Network	nagios	nagios_xi	Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normal webapp query.	CWE-78 OS Command	CVE-2020-24899	2024-11-21 14:16	2021-02-16	Show	GitHub Exploit DB Packet Storm

210949	6.1	MEDIUM Network	sdgc	pnpscada	PNPSCADA 2.200816204020 allows cross-site scripting (XSS), which can execute arbitrary JavaScript in the victim's browser.	CWE-79 Cross-site Scripting	CVE-2020-24842	2024-11-21 14:16	2021-02-11	Show	GitHub Exploit DB Packet Storm

210950	7.5	HIGH Network	issuer_project	issuer	An integer overflow has been found in the the latest version of Issuer. The total issuedCount can be zero if the parameter is overly large. An attacker can obtain the private key of the owner issued …	CWE-190 Integer Overflow or Wraparound	CVE-2020-24838	2024-11-21 14:16	2021-02-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed