Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 15, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258741 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0130 | 2010-05-28 18:44 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 258742 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0129 | 2010-05-28 18:43 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 258743 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player および Adobe Director における任意のコードを実行される脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0128 | 2010-05-28 18:43 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 258744 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0127 | 2010-05-28 18:43 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 258745 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品の VBE6.DLL における整数オーバーフローの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0815 | 2010-05-28 18:43 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 258746 | 9.3 | 危険 | マイクロソフト | - | 複数の Microsoft 製品の inetcomm.dll における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0816 | 2010-05-28 18:43 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 258747 | 9.3 | 危険 | 日立 | - | 複数の日立製品におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4776 | 2010-05-28 18:42 | 2009-07-21 | Show | GitHub Exploit DB Packet Storm |
| 258748 | 6.8 | 警告 | サイバートラスト株式会社 レッドハット |
- | TeX Live 2009 および teTeX の dvips における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2010-0827 | 2010-05-27 17:40 | 2010-05-6 | Show | GitHub Exploit DB Packet Storm |
| 258749 | 6.8 | 警告 | サイバートラスト株式会社 レッドハット |
- | teTeX および TeXlive 2007 の hpc.c における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2007-5935 | 2010-05-27 17:40 | 2007-11-13 | Show | GitHub Exploit DB Packet Storm |
| 258750 | 4.3 | 警告 | サイバートラスト株式会社 レッドハット |
- | dvipng および teTeX の set.c における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0829 | 2010-05-27 17:40 | 2010-05-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 15, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 215471 | 5.5 |
MEDIUM
Local |
apache netapp oracle |
groovy snapcenter primavera_unifier ilearning business_process_management_suite agile_plm retail_bulk_data_integration communications_services_gatekeeper retail_merchandising_… |
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method c… |
NVD-CWE-Other
|
CVE-2020-17521 | 2024-11-21 14:08 | 2020-12-8 | Show | GitHub Exploit DB Packet Storm |
| 215472 | 7.5 |
HIGH
Network |
apache netapp debian oracle |
tomcat oncommand_system_manager element_plug-in debian_linux instantis_enterprisetrack sd-wan_edge workload_manager mysql_enterprise_monitor communications_cloud_native_core_b… |
While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream re… |
CWE-200
Information Exposure |
CVE-2020-17527 | 2024-11-21 14:08 | 2020-12-4 | Show | GitHub Exploit DB Packet Storm |
| 215473 | 6.5 |
MEDIUM
Network |
pbootcms | pbootcms | Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user. |
CWE-352
Origin Validation Error |
CVE-2020-17901 | 2024-11-21 14:08 | 2020-12-1 | Show | GitHub Exploit DB Packet Storm |
| 215474 | 5.3 |
MEDIUM
Network |
untangle | untangle_firewall_ng | Untangle Firewall NG before 16.0 uses MD5 for passwords. |
CWE-326
Inadequate Encryption Strength |
CVE-2020-17494 | 2024-11-21 14:08 | 2020-11-13 | Show | GitHub Exploit DB Packet Storm |
| 215475 | 5.5 |
MEDIUM
Local |
saltstack debian |
salt debian_linux |
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions. |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2020-17490 | 2024-11-21 14:08 | 2020-11-6 | Show | GitHub Exploit DB Packet Storm |
| 215476 | 9.8 |
CRITICAL
Network |
apache debian |
shiro debian_linux |
Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass. |
CWE-287
Improper Authentication |
CVE-2020-17510 | 2024-11-21 14:08 | 2020-11-6 | Show | GitHub Exploit DB Packet Storm |
| 215477 | 9.6 |
CRITICAL
Network |
antsword_project | antsword | A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands. |
CWE-79
Cross-site Scripting |
CVE-2020-18766 | 2024-11-21 14:08 | 2020-10-27 | Show | GitHub Exploit DB Packet Storm |
| 215478 | 8.8 |
HIGH
Network |
eyoucms | eyoucms | A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. |
CWE-352
Origin Validation Error |
CVE-2020-18129 | 2024-11-21 14:08 | 2020-10-23 | Show | GitHub Exploit DB Packet Storm |
| 215479 | 6.1 |
MEDIUM
Network |
wso2 | api_manager | WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does … |
CWE-79
Cross-site Scripting |
CVE-2020-17454 | 2024-11-21 14:08 | 2020-10-22 | Show | GitHub Exploit DB Packet Storm |
| 215480 | 7.8 |
HIGH
Local |
foxitsoftware |
foxit_reader phantompdf |
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the tar… | - | CVE-2020-17417 | 2024-11-21 14:08 | 2020-10-14 | Show | GitHub Exploit DB Packet Storm |