Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228531 4.3 警告 pyforum - PyForum および zForum の models.parser におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4408 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228532 6.8 警告 pyforum - PyForum などにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4407 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228533 4.3 警告 rumbacms - Rumba XML の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4403 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228534 7.5 危険 sql-ledger - SQL-Ledger の初期設定における管理操作を実行される脆弱性 CWE-16
環境設定 		CVE-2009-4402 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
228535 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 用の Portsmouth Resources Database エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4396 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
228536 7.5 危険 TYPO3 Association - TYPO3 用の XDS Staff List エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4392 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
228537 5 警告 robert puntigam - TYPO3 用の watchdog エクステンションにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-4389 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
228538 6.8 警告 Scriptsez.net - Scriptsez.net EPH におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4385 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
228539 4.3 警告 Scriptsez.net - Scriptsez.net EPH におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4384 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
228540 4.3 警告 phpfaber - PHPFABER CMS の module.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4382 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
202711 9.8 CRITICAL
Network 		aviatrix openvpn The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party… NVD-CWE-noinfo
CVE-2020-7224 2024-11-21 14:36 2020-04-17 Show GitHub Exploit DB Packet Storm
202712 9.8 CRITICAL
Network 		arubanetworks clearpass A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As … CWE-306
Missing Authentication for Critical Function 		CVE-2020-7114 2024-11-21 14:36 2020-04-17 Show GitHub Exploit DB Packet Storm
202713 4.9 MEDIUM
Network 		arubanetworks clearpass A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of … NVD-CWE-noinfo
CVE-2020-7113 2024-11-21 14:36 2020-04-17 Show GitHub Exploit DB Packet Storm
202714 7.2 HIGH
Network 		arubanetworks clearpass A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher. CWE-74
Injection 		CVE-2020-7111 2024-11-21 14:36 2020-04-17 Show GitHub Exploit DB Packet Storm
202715 4.8 MEDIUM
Network 		arubanetworks clearpass ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass that could be executed… CWE-79
Cross-site Scripting 		CVE-2020-7110 2024-11-21 14:36 2020-04-17 Show GitHub Exploit DB Packet Storm
202716 9.8 CRITICAL
Network 		trianglemicroworks dnp3_source_code_library Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are affected:3.16.00 through 3.25.01. A specially crafted messag… CWE-787
 Out-of-bounds Write 		CVE-2020-6996 2024-11-21 14:36 2020-04-16 Show GitHub Exploit DB Packet Storm
202717 6.7 MEDIUM
Local 		ge cimplicity A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. If exploited, this vulnerability could allow an adversary to modify the … CWE-269
 Improper Privilege Management 		CVE-2020-6992 2024-11-21 14:36 2020-04-16 Show GitHub Exploit DB Packet Storm
202718 4.4 MEDIUM
Local 		mcafee endpoint_security Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileg… CWE-269
 Improper Privilege Management 		CVE-2020-7255 2024-11-21 14:36 2020-04-15 Show GitHub Exploit DB Packet Storm
202719 7.8 HIGH
Local 		mcafee endpoint_security Symbolic link manipulation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows authenticated local user to potentially gain an escalation of privil… CWE-59
Link Following 		CVE-2020-7250 2024-11-21 14:36 2020-04-15 Show GitHub Exploit DB Packet Storm
202720 5.3 MEDIUM
Local 		mcafee endpoint_security Protection mechanism failure in all processes in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 April 2020 Update allows local users to stop certain McAfee ENS processes, reducing the pro… NVD-CWE-Other
CVE-2020-7277 2024-11-21 14:36 2020-04-15 Show GitHub Exploit DB Packet Storm