Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229011 5 警告 Rockwell Automation - Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module の Web インターフェースにおける "内部の Web ページ情報" などを取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-0474 2012-12-20 19:10 2009-02-6 Show GitHub Exploit DB Packet Storm
229012 4.3 警告 vivvo - Vivvo CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0466 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229013 9.3 危険 synactis - Synactis ALL In-The-Box ActiveX の ALL_IN_THE_BOX.OCX における任意のファイルを作成される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0465 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229014 7.5 危険 wholehogsoftware - Whole Hog Password Protec における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0461 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229015 7.5 危険 wholehogsoftware - Whole Hog Ware Support における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-0460 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229016 7.5 危険 wholehogsoftware - Whole Hog Password Protect の admin/login_submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0459 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229017 7.5 危険 wholehogsoftware - Whole Hog Ware Support の admin/login_submit.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0458 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229018 7.5 危険 sourdough - Sourdough で使用されている patForms の examples/example_clientside_javascript.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-0456 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229019 7.5 危険 skalinks - Skalfa SkaLinks における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0451 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
229020 7.5 危険 syntax desktop - Syntax Desktop の admin/modules/aa/preview.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0448 2012-12-20 19:10 2009-02-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
215611 7.5 HIGH
Network 		prestashop correos_express The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attack… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-12120 2024-11-21 13:59 2020-04-28 Show GitHub Exploit DB Packet Storm
215612 5.3 MEDIUM
Network 		trusteddomain
fedoraproject 		opendmarc
fedora 		OpenDMARC through 1.3.2 and 1.4.x allows attacks that inject authentication results to provide false information about the domain that originated an e-mail message. This is caused by incorrect parsin… CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-12272 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215613 9.8 CRITICAL
Network 		testlink testlink In TestLink 1.9.20, the lib/cfields/cfieldsExport.php goback_url parameter causes a security risk because it depends on client input and is not constrained to lib/cfields/cfieldsView.php at the web s… NVD-CWE-noinfo
CVE-2020-12274 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215614 7.5 HIGH
Network 		testlink testlink In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials. CWE-311
CWE-522
Missing Encryption of Sensitive Data
 Insufficiently Protected Credentials 		CVE-2020-12273 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215615 6.1 MEDIUM
Network 		grafana grafana Grafana version < 6.7.3 is vulnerable for annotation popup XSS. CWE-79
Cross-site Scripting 		CVE-2020-12052 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215616 9.8 CRITICAL
Network 		sophos sfos A SQL injection issue was found in SFOS 17.0, 17.1, 17.5, and 18.0 before 2020-04-25 on Sophos XG Firewall devices, as exploited in the wild in April 2020. This affected devices configured with eithe… CWE-89
SQL Injection 		CVE-2020-12271 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215617 9.8 CRITICAL
Network 		artifex
debian
opensuse 		jbig2dec
debian_linux
leap 		jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow. CWE-787
 Out-of-bounds Write 		CVE-2020-12268 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215618 9.8 CRITICAL
Network 		qt qt setMarkdown in Qt before 5.14.2 has a use-after-free related to QTextMarkdownImporter::insertBlock. CWE-416
 Use After Free 		CVE-2020-12267 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215619 9.8 CRITICAL
Network 		decompress_project decompress The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Directory Traversal. CWE-22
CWE-59
Path Traversal
Link Following 		CVE-2020-12265 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm
215620 7.8 HIGH
Local 		avira antivirus Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink. CWE-59
Link Following 		CVE-2020-12254 2024-11-21 13:59 2020-04-27 Show GitHub Exploit DB Packet Storm