Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227261 6.8 警告 sjoerd arendsen - Drupal 用モジュールの Simplenews Statistics におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3785 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
227262 6.8 警告 sjoerd arendsen - Drupal 用モジュールの Simplenews Statistics におけるオープンリダイレクトの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-3784 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
227263 4.3 警告 sjoerd arendsen - Drupal 用モジュールの Simplenews Statistics におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3783 2012-12-20 19:28 2009-10-26 Show GitHub Exploit DB Packet Storm
227264 7.5 危険 quicksketch - Drupal 用の FileField モジュールにおける許可されていないファイルにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-3781 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
227265 4.3 警告 stefan auditor - Drupal 用の vCard モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3779 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
227266 7.5 危険 santostefano giovanni - ToyLog の read.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-3750 2012-12-20 19:28 2009-10-22 Show GitHub Exploit DB Packet Storm
227267 5 警告 ウェブセンス - Websense Personal Email Manager および Email Security の Web Administrator サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-3749 2012-12-20 19:28 2009-10-22 Show GitHub Exploit DB Packet Storm
227268 4.3 警告 ウェブセンス - Websense Personal Email Manager および Email Security の Web Administrator におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3748 2012-12-20 19:28 2009-10-22 Show GitHub Exploit DB Packet Storm
227269 4.3 警告 tbmnet - TBmnetCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3747 2012-12-20 19:28 2009-10-22 Show GitHub Exploit DB Packet Storm
227270 10 危険 riorey - RioRey RIOS における権限を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-3710 2012-12-20 19:28 2009-10-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201861 8.8 HIGH
Network 		minmax minmax A vulnerability classified as critical has been found in MINMAX. This affects an unknown part of the file /newsDia.php. The manipulation of the argument id leads to sql injection. It is possible to i… CWE-89
SQL Injection 		CVE-2020-36535 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201862 6.5 MEDIUM
Network 		easyiicms easyiicms A vulnerability was found in easyii CMS. It has been classified as problematic. Affected is an unknown function of the file /admin/sign/out. The manipulation leads to cross site request forgery. It i… CWE-352
 Origin Validation Error 		CVE-2020-36534 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201863 9.8 CRITICAL
Network 		klapp app A vulnerability was found in Klapp App and classified as problematic. This issue affects some unknown processing of the JSON Web Token Handler. The manipulation leads to weak authentication. The atta… CWE-287
Improper Authentication 		CVE-2020-36533 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201864 6.5 MEDIUM
Network 		klapp app A vulnerability has been found in Klapp App and classified as problematic. This vulnerability affects unknown code of the component Authorization. The manipulation leads to information disclosure (Cr… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-36532 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201865 8.8 HIGH
Network 		ibm sevone_network_performance_management A vulnerability, which was classified as critical, has been found in SevOne Network Management System up to 5.7.2.22. This issue affects the Device Manager Page. An injection leads to privilege escal… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-36531 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201866 8.8 HIGH
Network 		ibm sevone_network_performance_management A vulnerability classified as critical was found in SevOne Network Management System up to 5.7.2.22. This vulnerability affects the Alert Summary. The manipulation leads to sql injection. The attack … CWE-89
SQL Injection 		CVE-2020-36530 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201867 8.8 HIGH
Network 		ibm sevone_network_performance_management A vulnerability classified as critical has been found in SevOne Network Management System up to 5.7.2.22. This affects the file traceroute.php of the Traceroute Handler. The manipulation leads to pri… CWE-77
Command Injection 		CVE-2020-36529 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201868 6.5 MEDIUM
Network 		platinumchina platinum_mobile A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Up… CWE-287
Improper Authentication 		CVE-2020-36528 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201869 5.4 MEDIUM
Network 		aptis-solutions server_status A vulnerability, which was classified as problematic, has been found in Server Status. This issue affects some unknown processing of the component HTTP Status/SMTP Status. The manipulation leads to c… CWE-79
Cross-site Scripting 		CVE-2020-36527 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm
201870 5.4 MEDIUM
Network 		akeles countdown_timer A vulnerability classified as problematic was found in Countdown Timer. This vulnerability affects unknown code of the component Macro Handler. The manipulation leads to cross site scripting. The att… CWE-79
Cross-site Scripting 		CVE-2020-36526 2024-11-21 14:29 2022-06-8 Show GitHub Exploit DB Packet Storm