Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
258331	6.9	警告	アップル	-	Windows 上で稼働する Apple Safari における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-1805	2010-09-28 14:46	2010-09-7	Show	GitHub Exploit DB Packet Storm

258332	4.3	警告	Zope Foundation	-	Zope の ZServer におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3198	2010-09-28 14:46	2010-09-1	Show	GitHub Exploit DB Packet Storm

258333	-	-	Blackboard, Inc.	-	Blackboard Transact データベースに情報漏えいの脆弱性	-	-	2010-09-28 14:46	2010-09-2	Show	GitHub Exploit DB Packet Storm

258334	6.8	警告	w3m project ターボリナックスサイバートラスト株式会社レッドハット	-	w3m のistream.c における X.509 証明書の処理に関する任意の SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2010-2074	2010-09-27 16:24	2010-06-16	Show	GitHub Exploit DB Packet Storm

258335	6.8	警告	レッドハットサイバートラスト株式会社ターボリナックス OpenLDAP Foundation	-	OpenLDAP における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-3767	2010-09-27 16:23	2009-10-23	Show	GitHub Exploit DB Packet Storm

258336	4.3	警告	Opera Software ASA	-	Opera におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3021	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

258337	5	警告	Opera Software ASA	-	Opera の news-feed プレビュー機能における任意のフィードの購読を強制される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3020	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

258338	9.3	危険	Opera Software ASA	-	Opera におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3019	2010-09-27 16:21	2010-08-12	Show	GitHub Exploit DB Packet Storm

258339	9.3	危険	Opera Software ASA	-	Windows および Mac OS X 上で稼働する Opera における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2666	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

258340	4.3	警告	Opera Software ASA	-	Opera における URI の処理に関するクロスサイトスクリプティングの脆弱性\	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2665	2010-09-27 16:20	2010-06-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213081	8.8	HIGH Network	fruitywifi_project	fruitywifi	A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at the page_config_adv.php page, it is pos…	CWE-78 OS Command	CVE-2020-24849	2024-11-21 14:16	2020-11-6	Show	GitHub Exploit DB Packet Storm

213082	9.8	CRITICAL Network	osticket	osticket	SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-24881	2024-11-21 14:16	2020-11-3	Show	GitHub Exploit DB Packet Storm

213083	7.5	HIGH Network	qsc	q-sys_core_manager	An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files vi…	CWE-22 Path Traversal	CVE-2020-24990	2024-11-21 14:16	2020-10-29	Show	GitHub Exploit DB Packet Storm

213084	6.5	MEDIUM Network	fireeye	email_malware_protection_system	eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email sear…	CWE-89 SQL Injection	CVE-2020-25034	2024-11-21 14:16	2020-10-27	Show	GitHub Exploit DB Packet Storm

213085	7.8	HIGH Local	fruitywifi_project	fruitywifi	FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain …	CWE-287 CWE-269 Improper Authentication Improper Privilege Management	CVE-2020-24848	2024-11-21 14:16	2020-10-24	Show	GitHub Exploit DB Packet Storm

213086	4.3	MEDIUM Network	fruitywifi_project	fruitywifi	A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthenticated attacker can lure the victim to …	CWE-352 Origin Validation Error	CVE-2020-24847	2024-11-21 14:16	2020-10-24	Show	GitHub Exploit DB Packet Storm

213087	7.5	HIGH Network	mind	imind_server	InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 r…	CWE-425 Direct Request ('Forced Browsing')	CVE-2020-24765	2024-11-21 14:16	2020-10-21	Show	GitHub Exploit DB Packet Storm

213088	7.8	HIGH Local	socket.io-file_project	socket.io-file	The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a mod…	CWE-20 Improper Input Validation	CVE-2020-24807	2024-11-21 14:16	2020-10-7	Show	GitHub Exploit DB Packet Storm

213089	7.5	HIGH Network	envoyproxy	envoy	Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.	NVD-CWE-noinfo	CVE-2020-25018	2024-11-21 14:16	2020-10-2	Show	GitHub Exploit DB Packet Storm

213090	8.3	HIGH Network	envoyproxy	envoy	Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-i…	NVD-CWE-Other	CVE-2020-25017	2024-11-21 14:16	2020-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed