Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226041 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 用の Portsmouth Resources Database エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4396 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226042 7.5 危険 TYPO3 Association - TYPO3 用の XDS Staff List エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4392 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226043 5 警告 robert puntigam - TYPO3 用の watchdog エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-4389 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226044 6.8 警告 Scriptsez.net - Scriptsez.net EPH におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4385 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226045 4.3 警告 Scriptsez.net - Scriptsez.net EPH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4384 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226046 4.3 警告 phpfaber - PHPFABER CMS の module.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4382 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226047 4.3 警告 texmedia - texmedia Million Pixel Script の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4381 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
226048 7.5 危険 Wafer - Valarsoft Webmatic における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4380 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
226049 4.3 警告 Wafer - Valarsoft Webmatic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4379 2012-12-20 19:28 2009-12-14 Show GitHub Exploit DB Packet Storm
226050 4.3 警告 Wireshark - Windows 上で稼動している Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-4378 2012-12-20 19:28 2009-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211301 9.1 CRITICAL
Network 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with … CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2020-12032 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211302 6.1 MEDIUM
Physics 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 does not restrict access to the USB interface from an unauthorized user with physical acce… NVD-CWE-Other
CVE-2020-12024 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211303 6.1 MEDIUM
Local 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the operating system and editi… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-12020 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211304 9.8 CRITICAL
Network 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 a… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-12016 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211305 7.5 HIGH
Network 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system. This could allow an att… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-12008 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211306 6.1 MEDIUM
Physics 		baxter em2400_firmware
em1200_firmware 		Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13, an… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-12012 2024-11-21 13:59 2020-06-29 Show GitHub Exploit DB Packet Storm
211307 7.5 HIGH
Network 		apache
canonical
oracle
opensuse
debian
netapp 		tomcat
ubuntu_linux
workload_manager
siebel_ui_framework
mysql_enterprise_monitor
leap
debian_linux
oncommand_system_manager 		A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient … NVD-CWE-noinfo
CVE-2020-11996 2024-11-21 13:59 2020-06-27 Show GitHub Exploit DB Packet Storm
211308 8.8 HIGH
Adjacent 		rockwellautomation factorytalk_services_platform In Rockwell Automation FactoryTalk Services Platform, all versions, the redundancy host service (RdcyHost.exe) does not validate supplied identifiers, which could allow an unauthenticated, adjacent a… CWE-20
 Improper Input Validation  		CVE-2020-12033 2024-11-21 13:59 2020-06-24 Show GitHub Exploit DB Packet Storm
211309 9.0 CRITICAL
Network 		osisoft pi_web_api In OSIsoft PI Web API 2019 Patch 1 (1.12.0.6346) and all previous versions, the affected product is vulnerable to a cross-site scripting attack, which may allow an attacker to remotely execute arbitr… CWE-79
Cross-site Scripting 		CVE-2020-12021 2024-11-21 13:59 2020-06-24 Show GitHub Exploit DB Packet Storm
211310 9.8 CRITICAL
Network 		unisys stealth In Unisys Stealth 3.4.x, 4.x and 5.x before 5.0.026, if certificate-based authorization is used without HTTPS, an endpoint could be authorized without a private key. CWE-863
 Incorrect Authorization 		CVE-2020-12053 2024-11-21 13:59 2020-06-23 Show GitHub Exploit DB Packet Storm