Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229541	7.5	危険	Jason Sexauer	-	ChurchCMS の admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-6507	2013-01-25 14:23	2013-01-24	Show	GitHub Exploit DB Packet Storm

229542	4.3	警告	Zingiri	-	WordPress 用 Zingiri Web Shop プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6506	2013-01-25 14:22	2012-04-28	Show	GitHub Exploit DB Packet Storm

229543	4.3	警告	Shawn Bradley	-	PHP Volunteer Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6505	2013-01-25 14:20	2013-01-24	Show	GitHub Exploit DB Packet Storm

229544	7.5	危険	Shawn Bradley	-	PHP Volunteer Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-6504	2013-01-25 14:20	2013-01-24	Show	GitHub Exploit DB Packet Storm

229545	10	危険	Ninja Forge	-	Joomla! 用 NinjaXplorer コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-6503	2013-01-25 14:19	2012-04-26	Show	GitHub Exploit DB Packet Storm

229546	5.8	警告	GNU Project	-	GnuPG の g10/import.c における公開鍵リングのデータベースを破壊される脆弱性	CWE-20 不適切な入力確認	CVE-2012-6085	2013-01-25 14:18	2012-12-6	Show	GitHub Exploit DB Packet Storm

229547	4.3	警告	Cenango Financial LLC	-	WikidForum におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2099	2013-01-25 14:17	2012-04-12	Show	GitHub Exploit DB Packet Storm

229548	6.8	警告	Sitecom	-	Sitecom WLM-2501 におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-1922	2013-01-25 14:16	2013-01-24	Show	GitHub Exploit DB Packet Storm

229549	4.3	警告	Simple Realty Themes	-	WordPress 用 Advanced Text Widget プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4618	2013-01-25 14:15	2013-01-24	Show	GitHub Exploit DB Packet Storm

229550	4.3	警告	IBM	-	WebSphere Application Server (WAS) におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	-	2013-01-25 12:01	2013-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221001	7.8	HIGH Local	apple	mac_os_x tvos iphone_os ipados	A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2. Opening a maliciously crafted file may lead to unexpected applicatio…	NVD-CWE-noinfo	CVE-2020-10004	2024-11-21 13:54	2020-12-9	Show	GitHub Exploit DB Packet Storm

221002	7.8	HIGH Local	apple	mac_os_x tvos iphone_os watchos ipados	An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 1…	CWE-59 Link Following	CVE-2020-10003	2024-11-21 13:54	2020-12-9	Show	GitHub Exploit DB Packet Storm

221003	5.5	MEDIUM Local	apple	mac_os_x tvos itunes iphone_os watchos icloud ipados	A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 14.2 and iPadOS 14.2, iCloud for Windows 11.5, tvOS 14.2, iTunes 12.11 for Wi…	NVD-CWE-noinfo	CVE-2020-10002	2024-11-21 13:54	2020-12-9	Show	GitHub Exploit DB Packet Storm

221004	7.3	HIGH Local	acronis	true_image	Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can ac…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-10140	2024-11-21 13:54	2020-10-21	Show	GitHub Exploit DB Packet Storm

221005	7.8	HIGH Local	acronis	true_image	Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis True Image contains a privileged service that uses this…	CWE-665 Improper Initialization	CVE-2020-10139	2024-11-21 13:54	2020-10-21	Show	GitHub Exploit DB Packet Storm

221006	7.8	HIGH Local	acronis	cyber_protect cyber_backup	Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis Cyber Backup and Cyber Protect co…	CWE-665 Improper Initialization	CVE-2020-10138	2024-11-21 13:54	2020-10-21	Show	GitHub Exploit DB Packet Storm

221007	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated pr…	NVD-CWE-noinfo	CVE-2020-0764	2024-11-21 13:54	2020-10-17	Show	GitHub Exploit DB Packet Storm

221008	5.5	MEDIUM Local	microsoft	windows_10 windows_7 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_server_2008 windows_8.1 windows_server_2019	Microsoft Graphics Component Denial of Service Vulnerability	NVD-CWE-noinfo	CVE-2020-0921	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

221009	7.8	HIGH Local	microsoft	windows_10 windows_server_2016 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.</p> <p>To exploit this vulnerability, an attacker would first have to gain execution on t…	NVD-CWE-noinfo	CVE-2020-0766	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

221010	7.8	HIGH Local	microsoft	windows_10 windows_server_2012 windows_server_2016 windows_rt_8.1 windows_8.1 windows_server_2019	<p>An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run process…	NVD-CWE-noinfo	CVE-2020-0998	2024-11-21 13:54	2020-09-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed