Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
258001 9.3 危険 Mozilla Foundation - Windows 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-3131 2010-10-1 17:31 2010-09-7 Show GitHub Exploit DB Packet Storm
258002 9.3 危険 Mozilla Foundation - Apple Mac OS X 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-2770 2010-09-30 17:56 2010-09-7 Show GitHub Exploit DB Packet Storm
258003 7.2 危険 レッドハット - Red Hat Package Manager の lib/fsm.c における 権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2005-4889 2010-09-29 16:00 2010-06-8 Show GitHub Exploit DB Packet Storm
258004 10 危険 シスコシステムズ - Cisco Industrial Ethernet 3000 シリーズに SNMP Community String がハードコードされている問題 CWE-264
認可・権限・アクセス制御 		CVE-2010-1574 2010-09-29 16:00 2010-07-13 Show GitHub Exploit DB Packet Storm
258005 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0778 2010-09-29 16:00 2010-06-18 Show GitHub Exploit DB Packet Storm
258006 4.3 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0779 2010-09-29 16:00 2010-06-18 Show GitHub Exploit DB Packet Storm
258007 4.3 警告 IBM - IBM HTTP Server の mod_ibm_ssl におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2327 2010-09-29 15:59 2010-03-18 Show GitHub Exploit DB Packet Storm
258008 6.9 警告 アップル - Windows 上で稼働する Apple Safari における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1805 2010-09-28 14:46 2010-09-7 Show GitHub Exploit DB Packet Storm
258009 4.3 警告 Zope Foundation - Zope の ZServer におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-3198 2010-09-28 14:46 2010-09-1 Show GitHub Exploit DB Packet Storm
258010 - - Blackboard, Inc. - Blackboard Transact データベースに情報漏えいの脆弱性 - - 2010-09-28 14:46 2010-09-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212031 4.4 MEDIUM
Local 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwardi… NVD-CWE-Other
CVE-2020-25619 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212032 8.8 HIGH
Network 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as … CWE-78
OS Command  		CVE-2020-25618 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212033 8.8 HIGH
Network 		solarwinds n-central An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), le… CWE-22
Path Traversal 		CVE-2020-25617 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212034 8.8 HIGH
Network 		dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_… 		An issue was discovered on D-Link DSR-250 3.17 devices. Certain functionality in the Unified Services Router web interface could allow an authenticated attacker to execute arbitrary commands, due to … CWE-20
CWE-78
 Improper Input Validation 
OS Command  		CVE-2020-25759 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212035 8.8 HIGH
Network 		dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_… 		An issue was discovered on D-Link DSR-250 3.17 devices. Insufficient validation of configuration file checksums could allow a remote, authenticated attacker to inject arbitrary crontab entries into s… CWE-354
 Improper Validation of Integrity Check Value 		CVE-2020-25758 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212036 8.8 HIGH
Adjacent 		dlink dsr-150_firmware
dsr-150n_firmware
dsr-250_firmware
dsr-250n_firmware
dsr-500_firmware
dsr-500n_firmware
dsr-500ac_firmware
dsr-1000_firmware
dsr-1000n_firmware
dsr-1000ac_… 		A lack of input validation and access controls in Lua CGIs on D-Link DSR VPN routers may result in arbitrary input being passed to system command APIs, resulting in arbitrary command execution with r… CWE-20
CWE-78
 Improper Input Validation 
OS Command  		CVE-2020-25757 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212037 7.8 HIGH
Local 		x.org
redhat 		x_server
enterprise_linux 		A flaw was found in xorg-x11-server before 1.20.10. A heap-buffer overflow in XkbSetDeviceInfo may lead to a privilege escalation vulnerability. The highest threat from this vulnerability is to data … - CVE-2020-25712 2024-11-21 14:18 2020-12-16 Show GitHub Exploit DB Packet Storm
212038 6.5 MEDIUM
Network 		microfocus filr Unauthorized disclosure of sensitive information vulnerability in Micro Focus Filr product. Affecting all 3.x and 4.x versions. The vulnerability could be exploited to disclose unauthorized sensitive… NVD-CWE-noinfo
CVE-2020-25838 2024-11-21 14:18 2020-12-11 Show GitHub Exploit DB Packet Storm
212039 8.8 HIGH
Network 		totolink a3002r_firmware
a3002ru-v1_firmware
a3002ru-v2_firmware
a702r-v2_firmware
a702r-v3_firmware
n100re-v3_firmware
n150rt_firmware
n200re-v3_firmware
n200re-v4_firmware
n210re_… 		TOTOLINK A3002RU-V2.0.0 B20190814.1034 allows authenticated remote users to modify the system's 'Run Command'. An attacker can use this functionality to execute arbitrary OS commands on the router. CWE-78
CWE-862
OS Command 
 Missing Authorization 		CVE-2020-25499 2024-11-21 14:18 2020-12-10 Show GitHub Exploit DB Packet Storm
212040 6.1 MEDIUM
Network 		moodle moodle The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2. - CVE-2020-25627 2024-11-21 14:18 2020-12-9 Show GitHub Exploit DB Packet Storm