Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228771 4.3 警告 ulteo - Ulteo Open Virtual Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1785 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228772 6.8 警告 roboform - Frax.dk Php Recommend の admin.php における phpre_config.php へ任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1781 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228773 7.5 危険 roboform - Frax.dk Php Recommend の admin.php における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-1780 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228774 6.8 警告 roboform - Frax.dk Php Recommend の admin.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1779 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228775 4.3 警告 ulteo - Ulteo Open Virtual Desktop におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1775 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228776 9.3 危険 strawberry - Strawberry の plugins/ddb/foot.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1774 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228777 5 警告 ramazeiten - Rama Zaiten CMS の download.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1768 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228778 6.4 警告 teozkr - LightOpenCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1766 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228779 6.8 警告 Pluck CMS - pluck におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-1765 2012-12-20 19:10 2009-05-22 Show GitHub Exploit DB Packet Storm
228780 7.2 危険 サン・マイクロシステムズ - x86 platform 上で稼動する Sun OpenSolaris の Solaris Secure Digital スロットライバにおける権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1763 2012-12-20 19:10 2009-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208061 8.8 HIGH
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘quickFile.jsp’ page of OpenClinic GA 5.173.3. A specially crafted HTTP request can lead to SQL injection. An attacker can make an authenticated H… CWE-89
SQL Injection 		CVE-2020-27226 2024-11-21 14:20 2021-05-11 Show GitHub Exploit DB Packet Storm
208062 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The serialnumber parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection… CWE-89
SQL Injection 		CVE-2020-27241 2024-11-21 14:20 2021-04-20 Show GitHub Exploit DB Packet Storm
208063 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The componentStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL inject… CWE-89
SQL Injection 		CVE-2020-27240 2024-11-21 14:20 2021-04-20 Show GitHub Exploit DB Packet Storm
208064 8.1 HIGH
Network 		siemens nucleus_net
nucleus_source_code 		A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5… CWE-787
 Out-of-bounds Write 		CVE-2020-27009 2024-11-21 14:20 2021-04-23 Show GitHub Exploit DB Packet Storm
208065 7.8 HIGH
Local 		siemens solid_edge_se2021
solid_edge_se2020 		A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected application… - CVE-2020-26997 2024-11-21 14:20 2021-04-23 Show GitHub Exploit DB Packet Storm
208066 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The assetStatus parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection … CWE-89
SQL Injection 		CVE-2020-27239 2024-11-21 14:20 2021-04-15 Show GitHub Exploit DB Packet Storm
208067 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the getAssets.jsp page is vulnerable to unauthenticated SQL injection. An att… CWE-89
SQL Injection 		CVE-2020-27238 2024-11-21 14:20 2021-04-15 Show GitHub Exploit DB Packet Storm
208068 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3. The code parameter in the The nomenclature parameter in the getAssets.jsp page is vulnerable to una… CWE-89
SQL Injection 		CVE-2020-27237 2024-11-21 14:20 2021-04-15 Show GitHub Exploit DB Packet Storm
208069 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the compnomenclature parameter. An attacker can make an authenticated HTTP request to trigger thi… CWE-89
SQL Injection 		CVE-2020-27236 2024-11-21 14:20 2021-04-14 Show GitHub Exploit DB Packet Storm
208070 9.8 CRITICAL
Network 		openclinic_ga_project openclinic_ga An exploitable SQL injection vulnerability exists in ‘getAssets.jsp’ page of OpenClinic GA 5.173.3 in the description parameter. An attacker can make an authenticated HTTP request to trigger this vul… CWE-89
SQL Injection 		CVE-2020-27235 2024-11-21 14:20 2021-04-14 Show GitHub Exploit DB Packet Storm