Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255521	4.3	警告	flock	-	Flock Browser におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3202	2012-03-27 18:42	2010-09-13	Show	GitHub Exploit DB Packet Storm

255522	4.3	警告	マイクロソフト	-	Microsoft Word 2003 SP3 の MSO.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3200	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

255523	9.3	危険	tigris	-	TortoiseSVN における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3199	2012-03-27 18:42	2010-08-30	Show	GitHub Exploit DB Packet Storm

255524	5	警告	GNU Project	-	GNU C Library の特定の実行時メモリ保護機能におけるプロセスメモリから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-3192	2012-03-27 18:42	2010-10-14	Show	GitHub Exploit DB Packet Storm

255525	2.6	注意	Mozilla Foundation	-	Bugzilla における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3172	2012-03-27 18:42	2010-11-5	Show	GitHub Exploit DB Packet Storm

255526	7.2	危険	Novell	-	SUSE Linux Enterprise および openSUSE の Novell Client novfs モジュールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3110	2012-03-27 18:42	2010-10-12	Show	GitHub Exploit DB Packet Storm

255527	5.1	警告	jianping yu	-	pidgin-knotify プラグインの notify 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3088	2012-03-27 18:42	2010-10-8	Show	GitHub Exploit DB Packet Storm

255528	6.8	警告	Novell LibTIFF	-	SUSE openSUSE の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2010-3087	2012-03-27 18:42	2010-09-21	Show	GitHub Exploit DB Packet Storm

255529	10	危険	david shadoff	-	Mednafen の network-play 実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3085	2012-03-27 18:42	2010-05-29	Show	GitHub Exploit DB Packet Storm

255530	4.3	警告	Apache Software Foundation レッドハット	-	Red Hat Enterprise MRG などで使用される Apache Qpid の sys/ssl/SslSocket.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-3083	2012-03-27 18:42	2010-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
246211	6.5	MEDIUM Network	atlassian	universal_plugin_manager	The Upload add-on resource in Atlassian Universal Plugin Manager before version 2.22.14 allows remote attackers who have system administrator privileges to read files, make network requests and perfo…	CWE-611 XXE	CVE-2018-20233	2024-11-21 13:01	2019-01-19	Show	GitHub Exploit DB Packet Storm

246212	7.5	HIGH Network	winscp	winscp	In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SC…	CWE-20 Improper Input Validation	CVE-2018-20684	2024-11-21 13:01	2019-01-11	Show	GitHub Exploit DB Packet Storm

246213	5.3	MEDIUM Network	openbsd winscp netapp debian canonical redhat oracle fujitsu siemens	openssh winscp cloud_backup element_software storage_automation_store ontap_select_deploy steelstore_cloud_integrated_storage debian_linux ubuntu_linux enterprise_linux …	In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the tar…	CWE-863 Incorrect Authorization	CVE-2018-20685	2024-11-21 13:01	2019-01-11	Show	GitHub Exploit DB Packet Storm

246214	8.1	HIGH Network	gitolite	gitolite	commands/rsync in Gitolite before 3.6.11, if .gitolite.rc enables rsync, mishandles the rsync command line, which allows attackers to have a "bad" impact by triggering use of an option other than -v,…	CWE-20 Improper Input Validation	CVE-2018-20683	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246215	5.4	MEDIUM Network	fork-cms	fork_cms	Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).	CWE-79 Cross-site Scripting	CVE-2018-20682	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246216	6.1	MEDIUM Physics	mate-desktop	mate-screensaver	mate-screensaver before 1.20.2 in MATE Desktop Environment allows physically proximate attackers to view screen content and possibly control applications. By unplugging and re-plugging or power-cycli…	CWE-200 Information Exposure	CVE-2018-20681	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246217	4.8	MEDIUM Network	frog_cms_project	frog_cms	Frog CMS 0.9.5 has XSS in the admin/?/page/edit/1 body field.	CWE-79 Cross-site Scripting	CVE-2018-20680	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246218	7.5	HIGH Network	busybox canonical	busybox ubuntu_linux	An issue was discovered in BusyBox before 1.30.0. An out of bounds read in udhcp components (consumed by the DHCP server, client, and relay) allows a remote attacker to leak sensitive information fro…	CWE-125 Out-of-bounds Read	CVE-2018-20679	2024-11-21 13:01	2019-01-10	Show	GitHub Exploit DB Packet Storm

246219	6.1	MEDIUM Network	getbootstrap	bootstrap	In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.	CWE-79 Cross-site Scripting	CVE-2018-20677	2024-11-21 13:01	2019-01-9	Show	GitHub Exploit DB Packet Storm

246220	6.1	MEDIUM Network	getbootstrap	bootstrap	In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.	CWE-79 Cross-site Scripting	CVE-2018-20676	2024-11-21 13:01	2019-01-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed