Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248591 6.5 警告 Best Practical Solutions - Best Practical Solutions RT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4460 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
248592 3.5 注意 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4459 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
248593 6.8 警告 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4458 2012-06-6 14:12 2012-06-4 Show GitHub Exploit DB Packet Storm
248594 6.8 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-2085 2012-06-6 14:10 2012-06-4 Show GitHub Exploit DB Packet Storm
248595 4 警告 Best Practical Solutions - Best Practical Solutions RT における過去のパスワードハッシュを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-2084 2012-06-6 14:09 2012-06-4 Show GitHub Exploit DB Packet Storm
248596 4.3 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2083 2012-06-6 14:07 2012-06-4 Show GitHub Exploit DB Packet Storm
248597 5 警告 Best Practical Solutions - Best Practical Solutions RT における平文パスワードを検出される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-2082 2012-06-6 14:05 2012-06-4 Show GitHub Exploit DB Packet Storm
248598 5 警告 インターネットイニシアティブ - SEIL シリーズにおけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2632 2012-06-6 12:01 2012-06-6 Show GitHub Exploit DB Packet Storm
248599 5 警告 WassUp - WordPress 用プラグイン WassUp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2633 2012-06-6 12:00 2012-06-6 Show GitHub Exploit DB Packet Storm
248600 4.3 警告 株式会社ウェブロジック - ＠WEBショッピングカートにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2631 2012-06-5 12:01 2012-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199281 9.8 CRITICAL
Network 		klona_project klona Flaw in input validation in npm package klona version 1.1.0 and earlier may allow prototype pollution attack that may result in remote code execution or denial of service of applications using klona. CWE-20
 Improper Input Validation  		CVE-2020-8125 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199282 5.3 MEDIUM
Network 		url-parse_project url-parse Insufficient validation and sanitization of user input exists in url-parse npm package version 1.4.4 and earlier may allow attacker to bypass security checks. CWE-20
 Improper Input Validation  		CVE-2020-8124 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199283 4.9 MEDIUM
Network 		strapi strapi A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-8123 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199284 4.3 MEDIUM
Network 		nextcloud nextcloud_server A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received. CWE-20
 Improper Input Validation  		CVE-2020-8122 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199285 8.1 HIGH
Network 		nextcloud nextcloud_server A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-8121 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199286 6.1 MEDIUM
Network 		nextcloud nextcloud_server A reflected Cross-Site Scripting vulnerability in Nextcloud Server 16.0.1 was discovered in the svg generation. CWE-79
Cross-site Scripting 		CVE-2020-8120 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199287 4.3 MEDIUM
Network 		nextcloud nextcloud_server Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app. CWE-863
 Incorrect Authorization 		CVE-2020-8119 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199288 5.0 MEDIUM
Network 		nextcloud
novell
opensuse 		nextcloud_server
suse_linux_enterprise_server
backports_sle 		An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calendar application. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-8118 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199289 4.3 MEDIUM
Network 		nextcloud nextcloud_server Improper preservation of permissions in Nextcloud Server 14.0.3 causes the event details to be leaked when sharing a non-public event. CWE-281
 Improper Preservation of Permissions 		CVE-2020-8117 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm
199290 7.3 HIGH
Network 		dot-prop_project dot-prop Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') 		CVE-2020-8116 2024-11-21 14:38 2020-02-5 Show GitHub Exploit DB Packet Storm