Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225941 5 警告 Winn GuestBook - Winn ASP Guestbook におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4760 2012-12-20 19:28 2010-03-29 Show GitHub Exploit DB Packet Storm
225942 7.5 危険 phppower - Swinger Club Portal の anzeiger/start.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4752 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
225943 7.5 危険 phppower - Swinger Club Portal の anzeiger/start.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4751 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
225944 6.8 警告 phppower - Top Paidmailer の home.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4750 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
225945 7.5 危険 robert heel - TYPO3 用の resetbepassword エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4710 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
225946 4.3 警告 sebastian winterhalder - TYPO3 用の Mailform エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4706 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
225947 4.3 警告 thomas loeffler - TYPO3 用の Twitter Search エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4705 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
225948 5 警告 TYPO3 Association - TYPO3 用の Webesse E-Card エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-4704 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
225949 7.5 危険 TYPO3 Association - TYPO3 用の Webesse Image Gallery エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4703 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
225950 5 警告 skadate - SkaDate Dating の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4700 2012-12-20 19:28 2010-03-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211461 8.8 HIGH
Network 		librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by systemic CSRF. CWE-352
 Origin Validation Error 		CVE-2020-11438 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211462 4.3 MEDIUM
Network 		librehealth librehealth_ehr LibreHealth EMR v2.0.0 is affected by SQL injection allowing low-privilege authenticated users to enumerate the database. CWE-89
SQL Injection 		CVE-2020-11437 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211463 9.0 CRITICAL
Network 		librehealth librehealth_ehr LibreHealth EMR v2.0.0 is vulnerable to XSS that results in the ability to force arbitrary actions on behalf of other users including administrators. CWE-79
Cross-site Scripting 		CVE-2020-11436 2024-11-21 13:57 2020-07-16 Show GitHub Exploit DB Packet Storm
211464 9.1 CRITICAL
Network 		inetsoftware pdfc
helpdesk
clear_reports 		The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbitrary system files and directories on th… CWE-22
Path Traversal 		CVE-2020-11431 2024-11-21 13:57 2020-05-8 Show GitHub Exploit DB Packet Storm
211465 7.5 HIGH
Network 		openvpn openvpn_access_server An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management … CWE-776
XML Entity Expansion 		CVE-2020-11462 2024-11-21 13:57 2020-05-4 Show GitHub Exploit DB Packet Storm
211466 8.1 HIGH
Network 		zoom it_installer The Zoom IT installer for Windows (ZoomInstallerFull.msi) prior to version 4.6.10 deletes files located in %APPDATA%\Zoom before installing an updated version of the client. Standard users are able t… CWE-59
CWE-732
Link Following
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-11443 2024-11-21 13:57 2020-05-4 Show GitHub Exploit DB Packet Storm
211467 7.8 HIGH
Local 		eset internet_security
nod32_antivirus
smart_security
endpoint_security
endpoint_antivirus
mail_security
file_security
antivirus_and_antispyware 		ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these… CWE-59
Link Following 		CVE-2020-11446 2024-11-21 13:57 2020-04-29 Show GitHub Exploit DB Packet Storm
211468 4.9 MEDIUM
Network 		sonatype nexus_repository_manager An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cle… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-11415 2024-11-21 13:57 2020-04-28 Show GitHub Exploit DB Packet Storm
211469 6.5 MEDIUM
Network 		abb
generex 		cs141_firmware UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by do… CWE-22
Path Traversal 		CVE-2020-11420 2024-11-21 13:57 2020-04-27 Show GitHub Exploit DB Packet Storm
211470 5.4 MEDIUM
Network 		jetbrains space JetBrains Space through 2020-04-22 allows stored XSS in Chats. CWE-79
Cross-site Scripting 		CVE-2020-11416 2024-11-21 13:57 2020-04-22 Show GitHub Exploit DB Packet Storm