Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224041	7.5	危険	シスコシステムズ	-	Cisco Unified Communications Manager の Java データベースインターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-0728	2014-02-14 14:51	2014-02-12	Show	GitHub Exploit DB Packet Storm

224042	7.5	危険	シスコシステムズ	-	Cisco Unified Communications Manager の CallManager Interactive Voice Response インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-0727	2014-02-14 14:50	2014-02-12	Show	GitHub Exploit DB Packet Storm

224043	7.5	危険	シスコシステムズ	-	Cisco Unified Communications Manager の IP Manager Assistant インターフェースにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-0726	2014-02-14 14:48	2014-02-12	Show	GitHub Exploit DB Packet Storm

224044	5	警告	シスコシステムズ	-	Cisco Unified Communications Manager における重要な情報を取得される脆弱性	CWE-287 不適切な認証	CVE-2014-0725	2014-02-14 14:47	2014-02-13	Show	GitHub Exploit DB Packet Storm

224045	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager のバルク管理インターフェースにおける認証を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2014-0724	2014-02-14 14:46	2014-02-12	Show	GitHub Exploit DB Packet Storm

224046	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Manager の IP Manager Assistant インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0723	2014-02-14 14:44	2014-02-12	Show	GitHub Exploit DB Packet Storm

224047	5	警告	シスコシステムズ	-	Cisco Unified Communications Manager の log4jinit Web アプリケーションにおけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2014-0722	2014-02-14 14:43	2014-02-12	Show	GitHub Exploit DB Packet Storm

224048	6.4	警告	atmail pty ltd	-	Atmail オープンソースの Atmail WebMail Client における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2012-1919	2014-02-14 14:18	2012-03-27	Show	GitHub Exploit DB Packet Storm

224049	4.3	警告	atmail pty ltd	-	Atmail Webmail Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2585	2014-02-14 12:03	2013-03-25	Show	GitHub Exploit DB Packet Storm

224050	4.3	警告	IBM オラクル	-	Oracle Java SE および Java SE Embedded における JGSS に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5800	2014-02-13 18:10	2013-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211791	6.8	MEDIUM Physics	solokeys nitrokey	solo_firmware somu_firmware fido2_firmware	The flash read-out protection (RDP) level is not enforced during the device initialization phase of the SoloKeys Solo 4.0.0 & Somu and the Nitrokey FIDO2 token. This allows an adversary to downgrade …	CWE-326 Inadequate Encryption Strength	CVE-2020-27208	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

211792	7.5	HIGH Network	micro-ecc_project	micro-ecc	The ECDSA operation of the micro-ecc library 1.0 is vulnerable to simple power analysis attacks which allows an adversary to extract the private ECC key.	NVD-CWE-noinfo	CVE-2020-27209	2024-11-21 14:20	2021-05-21	Show	GitHub Exploit DB Packet Storm

211793	7.5	HIGH Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, …	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27185	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211794	5.9	MEDIUM Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	The NPort IA5000A Series devices use Telnet as one of the network device management services. Telnet does not support the encryption of client-server communications, making it vulnerable to Man-in-th…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-27184	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211795	7.5	HIGH Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-…	NVD-CWE-noinfo	CVE-2020-27150	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211796	6.5	MEDIUM Network	moxa	nport_ia5150a_firmware nport_ia5250a_firmware nport_ia5450a_firmware	By exploiting a vulnerability in NPort IA5150A/IA5250A Series before version 1.5, a user with “Read Only” privilege level can send requests via the web console to have the device’s configuration chan…	NVD-CWE-noinfo	CVE-2020-27149	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211797	7.5	HIGH Network	kaspersky	password_manager	Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker woul…	CWE-326 Inadequate Encryption Strength	CVE-2020-27020	2024-11-21 14:20	2021-05-14	Show	GitHub Exploit DB Packet Storm

211798	8.8	HIGH Network	openclinic_ga_project	openclinic_ga	An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoComment parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authen…	CWE-89 SQL Injection	CVE-2020-27246	2024-11-21 14:20	2021-05-11	Show	GitHub Exploit DB Packet Storm

211799	8.8	HIGH Network	openclinic_ga_project	openclinic_ga	An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoBuyer parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenti…	CWE-89 SQL Injection	CVE-2020-27245	2024-11-21 14:20	2021-05-11	Show	GitHub Exploit DB Packet Storm

211800	8.8	HIGH Network	openclinic_ga_project	openclinic_ga	An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoCode parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authentic…	CWE-89 SQL Injection	CVE-2020-27244	2024-11-21 14:20	2021-05-11	Show	GitHub Exploit DB Packet Storm