Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226111	4.3	警告	simplog	-	Simplog の comments.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4093	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226112	6.8	警告	simplog	-	Simplog の user.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-4092	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226113	5	警告	simplog	-	Simplog の comments.php におけるコメントを編集される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-4091	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226114	7.5	危険	telepark	-	telepark.wiki の ajax/addComment.php における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2009-4090	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226115	5	警告	telepark	-	telepark.wiki における認可を回避される脆弱性	CWE-287 不適切な認証	CVE-2009-4089	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226116	6.8	警告	telepark	-	telepark.wiki におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2009-4088	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226117	4.3	警告	telepark	-	telepark.wiki の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4087	2012-12-20 19:28	2009-11-29	Show	GitHub Exploit DB Packet Storm

226118	4.3	警告	puntolatinoclub	-	Drupal 用の Gallery Assist モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4064	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

226119	4.3	警告	yuriy babenko	-	Drupal 用の Agreement モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-4061	2012-12-20 19:28	2009-11-18	Show	GitHub Exploit DB Packet Storm

226120	7.5	危険	telebidauctionscript	-	Telebid Auction Script の allauctions.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2009-4058	2012-12-20 19:28	2009-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212921	5.0	MEDIUM Network	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An elevation of privilege vulnerability exists when Active Directory Federation Services (ADFS) improperly handles multi-factor authentication requests. An attacker who successfully exploited this…	NVD-CWE-noinfo	CVE-2020-0837	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212922	7.5	HIGH Network	microsoft	windows_server_2012 windows_server_2016 windows_server_2008 windows_server_2019	<p>A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries. An attacker who successfully exploited this vulnerability could cause the DNS service to become no…	NVD-CWE-noinfo	CVE-2020-0836	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212923	5.3	MEDIUM Local	microsoft	windows_10 windows_server_2016	<p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploited this vulnerability could delete a ta…	NVD-CWE-noinfo	CVE-2020-0805	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212924	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected syst…	NVD-CWE-noinfo	CVE-2020-0790	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212925	7.8	HIGH Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could …	NVD-CWE-noinfo	CVE-2020-0782	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212926	8.8	HIGH Network	microsoft	windows_server_2012 windows_server_2016 windows_server_2008 windows_server_2019	<p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability coul…	NVD-CWE-noinfo	CVE-2020-0761	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212927	8.8	HIGH Network	microsoft	windows_server_2012 windows_server_2016 windows_server_2008 windows_server_2019	<p>A remote code execution vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticated attacker who successfully exploited the vulnerability coul…	NVD-CWE-noinfo	CVE-2020-0718	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

212928	7.8	HIGH Local	siemens	license_management_utility	A vulnerability has been identified in License Management Utility (LMU) (All versions < V2.4). The lmgrd service of the affected application is executed with local SYSTEM privileges on the server whi…	-	CVE-2020-10056	2024-11-21 13:54	2020-09-10	Show	GitHub Exploit DB Packet Storm

212929	7.8	HIGH Local	siemens	simatic_rtls_locating_manager	A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). Multiple services of the affected application are executed with SYSTEM privileges while the call path is…	CWE-428 Unquoted Search Path or Element	CVE-2020-10051	2024-11-21 13:54	2020-09-10	Show	GitHub Exploit DB Packet Storm

212930	7.8	HIGH Local	siemens	simatic_rtls_locating_manager	A vulnerability has been identified in SIMATIC RTLS Locating Manager (All versions < V2.10.2). The directory of service executables of the affected application could allow a local attacker to include…	CWE-276 Incorrect Default Permissions	CVE-2020-10050	2024-11-21 13:54	2020-09-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed