Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227131 7.8 危険 シスコシステムズ - Cisco Unified Customer Voice Portal のログビューアにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1223 2013-05-10 16:16 2013-05-8 Show GitHub Exploit DB Packet Storm
227132 7.8 危険 シスコシステムズ - Cisco Unified Customer Voice Portal の Tomcat Web Management 機能における任意のカスタム Web アプリケーションを起動される脆弱性 CWE-16
環境設定 		CVE-2013-1222 2013-05-10 16:16 2013-05-8 Show GitHub Exploit DB Packet Storm
227133 10 危険 シスコシステムズ - Cisco Unified Customer Voice Portal の Tomcat Web Management 機能における任意のコードを実行される脆弱性 CWE-16
環境設定 		CVE-2013-1221 2013-05-10 16:15 2013-05-8 Show GitHub Exploit DB Packet Storm
227134 7.8 危険 シスコシステムズ - Cisco Unified Customer Voice Portal の CallServer コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-1220 2013-05-10 16:14 2013-05-8 Show GitHub Exploit DB Packet Storm
227135 4.3 警告 ジュニパーネットワークス - Juniper SmartPass WLAN Security Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3498 2013-05-10 14:51 2013-05-8 Show GitHub Exploit DB Packet Storm
227136 4.7 警告 ジュニパーネットワークス - Junos Space JA1500 アプライアンスなどで使用される Juniper Junos Space におけるパスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-3497 2013-05-10 14:51 2013-05-8 Show GitHub Exploit DB Packet Storm
227137 3.5 注意 シマンテック - Symantec Brightmail Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1611 2013-05-10 14:07 2013-05-8 Show GitHub Exploit DB Packet Storm
227138 4.3 警告 Invensys - Invensys Wonderware Information Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0688 2013-05-10 14:07 2013-05-7 Show GitHub Exploit DB Packet Storm
227139 9.3 危険 Invensys - Invensys Wonderware Information Server における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0686 2013-05-10 14:06 2013-05-7 Show GitHub Exploit DB Packet Storm
227140 9.3 危険 Invensys - Invensys Wonderware Information Server における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0685 2013-05-10 14:06 2013-05-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209421 5.4 MEDIUM
Network 		openclinic_project openclinic OpenClinic version 0.8.2 is affected by a stored XSS vulnerability in lib/Check.php that allows users of the application to force actions on behalf of other users. CWE-79
Cross-site Scripting 		CVE-2020-28938 2024-11-21 14:23 2020-12-4 Show GitHub Exploit DB Packet Storm
209422 7.5 HIGH
Network 		openclinic_project openclinic OpenClinic version 0.8.2 is affected by a missing authentication vulnerability that allows unauthenticated users to access any patient's medical test results, possibly resulting in disclosure of Prot… CWE-306
CWE-425
Missing Authentication for Critical Function
 Direct Request ('Forced Browsing') 		CVE-2020-28937 2024-11-21 14:23 2020-12-4 Show GitHub Exploit DB Packet Storm
209423 9.8 CRITICAL
Network 		adrianmercurio gym_management_system An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable. CWE-89
SQL Injection 		CVE-2020-29288 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209424 9.8 CRITICAL
Network 		car_rental_management_system_project car_rental_management_system An SQL injection vulnerability was discovered in Car Rental Management System v1.0 can be exploited via the id parameter in view_car.php or the car_id parameter in booking.php. CWE-89
SQL Injection 		CVE-2020-29287 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209425 9.8 CRITICAL
Network 		point_of_sales_in_php\/pdo_project point_of_sales_in_php\/pdo SQL injection vulnerability was discovered in Point of Sales in PHP/PDO 1.0, which can be exploited via the id parameter to edit_category.php. CWE-89
SQL Injection 		CVE-2020-29285 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209426 9.8 CRITICAL
Network 		multi_restaurant_table_reservation_system_project multi_restaurant_table_reservation_system The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the table_id parameter which allows unauthenticated SQL Injection. An attacker can s… CWE-89
SQL Injection 		CVE-2020-29284 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209427 9.8 CRITICAL
Network 		online_doctor_appointment_booking_system_php_and_mysql_project online_doctor_appointment_booking_system_php_and_mysql An SQL injection vulnerability was discovered in Online Doctor Appointment Booking System PHP and Mysql via the q parameter to getuser.php. CWE-89
SQL Injection 		CVE-2020-29283 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209428 9.8 CRITICAL
Network 		bloodx_project bloodx SQL injection vulnerability in BloodX 1.0 allows attackers to bypass authentication. CWE-89
SQL Injection 		CVE-2020-29282 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209429 9.8 CRITICAL
Network 		victor_cms_project victor_cms The Victor CMS v1.0 application is vulnerable to SQL injection via the 'search' parameter on the search.php page. CWE-89
SQL Injection 		CVE-2020-29280 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm
209430 9.8 CRITICAL
Network 		74cms 74cms PHP remote file inclusion in the assign_resume_tpl method in Application/Common/Controller/BaseController.class.php in 74CMS before 6.0.48 allows remote code execution. NVD-CWE-noinfo
CVE-2020-29279 2024-11-21 14:23 2020-12-3 Show GitHub Exploit DB Packet Storm