Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259031	6.8	警告	アップル	-	Apple Mac OS X の ImageIO における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-0543	2010-07-9 16:24	2010-06-15	Show	GitHub Exploit DB Packet Storm

259032	4.3	警告	アップル	-	Apple Mac OS X の iChat におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1374	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

259033	4.3	警告	アップル	-	Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1373	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

259034	3.3	注意	アップル	-	Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0546	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

259035	4.4	警告	アップル	-	Apple Mac OS X の DesktopServices におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0545	2010-07-8 18:26	2010-06-15	Show	GitHub Exploit DB Packet Storm

259036	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

259037	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

259038	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

259039	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

259040	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
213081	8.8	HIGH Network	fruitywifi_project	fruitywifi	A remote code execution vulnerability is identified in FruityWifi through 2.4. Due to improperly escaped shell metacharacters obtained from the POST request at the page_config_adv.php page, it is pos…	CWE-78 OS Command	CVE-2020-24849	2024-11-21 14:16	2020-11-6	Show	GitHub Exploit DB Packet Storm

213082	9.8	CRITICAL Network	osticket	osticket	SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-24881	2024-11-21 14:16	2020-11-3	Show	GitHub Exploit DB Packet Storm

213083	7.5	HIGH Network	qsc	q-sys_core_manager	An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traversal and obtain operating system files vi…	CWE-22 Path Traversal	CVE-2020-24990	2024-11-21 14:16	2020-10-29	Show	GitHub Exploit DB Packet Storm

213084	6.5	MEDIUM Network	fireeye	email_malware_protection_system	eMPS prior to eMPS 9.0 FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort, sort_by, search{URL], or search[attachment] parameter to the email sear…	CWE-89 SQL Injection	CVE-2020-25034	2024-11-21 14:16	2020-10-27	Show	GitHub Exploit DB Packet Storm

213085	7.8	HIGH Local	fruitywifi_project	fruitywifi	FruityWifi through 2.4 has an unsafe Sudo configuration [(ALL : ALL) NOPASSWD: ALL]. This allows an attacker to perform a system-level (root) local privilege escalation, allowing an attacker to gain …	CWE-287 CWE-269 Improper Authentication Improper Privilege Management	CVE-2020-24848	2024-11-21 14:16	2020-10-24	Show	GitHub Exploit DB Packet Storm

213086	4.3	MEDIUM Network	fruitywifi_project	fruitywifi	A Cross-Site Request Forgery (CSRF) vulnerability is identified in FruityWifi through 2.4. Due to a lack of CSRF protection in page_config_adv.php, an unauthenticated attacker can lure the victim to …	CWE-352 Origin Validation Error	CVE-2020-24847	2024-11-21 14:16	2020-10-24	Show	GitHub Exploit DB Packet Storm

213087	7.5	HIGH Network	mind	imind_server	InterMind iMind Server through 3.13.65 allows remote unauthenticated attackers to read the self-diagnostic archive via a direct api/rs/monitoring/rs/api/system/dump-diagnostic-info?server=127.0.0.1 r…	CWE-425 Direct Request ('Forced Browsing')	CVE-2020-24765	2024-11-21 14:16	2020-10-21	Show	GitHub Exploit DB Packet Storm

213088	7.8	HIGH Local	socket.io-file_project	socket.io-file	The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a mod…	CWE-20 Improper Input Validation	CVE-2020-24807	2024-11-21 14:16	2020-10-7	Show	GitHub Exploit DB Packet Storm

213089	7.5	HIGH Network	envoyproxy	envoy	Envoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.	NVD-CWE-noinfo	CVE-2020-25018	2024-11-21 14:16	2020-10-2	Show	GitHub Exploit DB Packet Storm

213090	8.3	HIGH Network	envoyproxy	envoy	Envoy through 1.15.0 only considers the first value when multiple header values are present for some HTTP headers. Envoy’s setCopy() header map API does not replace all existing occurences of a non-i…	NVD-CWE-Other	CVE-2020-25017	2024-11-21 14:16	2020-10-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed