Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
248631	6.5	警告	ITechScripts	-	Travelon Express における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2012-2939	2012-05-29 15:01	2012-05-27	Show	GitHub Exploit DB Packet Storm

248632	4.3	警告	ITechScripts	-	Travelon Express におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2938	2012-05-29 15:00	2012-05-27	Show	GitHub Exploit DB Packet Storm

248633	7.5	危険	Pligg	-	Pligg CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2937	2012-05-29 14:58	2012-05-27	Show	GitHub Exploit DB Packet Storm

248634	4.3	警告	Pligg	-	Pligg CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2936	2012-05-29 14:58	2012-05-27	Show	GitHub Exploit DB Packet Storm

248635	4.3	警告	Pligg	-	Pligg CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2436	2012-05-29 14:57	2012-05-27	Show	GitHub Exploit DB Packet Storm

248636	4.3	警告	osCommerce	-	OSCommerce Online Merchant におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2935	2012-05-29 14:18	2012-05-27	Show	GitHub Exploit DB Packet Storm

248637	2.6	注意	osCommerce	-	OSCommerce Online Merchant におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1792	2012-05-29 14:18	2012-05-27	Show	GitHub Exploit DB Packet Storm

248638	4.3	警告	The Support Incident Tracker Project	-	Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2235	2012-05-29 14:14	2012-05-27	Show	GitHub Exploit DB Packet Storm

248639	2.6	注意	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1413	2012-05-29 14:13	2012-05-27	Show	GitHub Exploit DB Packet Storm

248640	10	危険	Seagate Technology LLC	-	Seagate BlackArmor NAS に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2568	2012-05-29 13:47	2012-05-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211771	2.3	LOW Local	hms-networks	ewon_flexy_firmware ewon_cosy_firmware	All version of Ewon Flexy and Cosy prior to 14.1 use wildcards such as (*) under which domains can request resources. An attacker with local access and high privileges could inject scripts into the C…	NVD-CWE-Other	CVE-2020-16230	2024-11-21 14:06	2020-09-19	Show	GitHub Exploit DB Packet Storm

211772	6.5	MEDIUM Adjacent	philips	clinical_collaboration_platform	Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an attacker to influe…	-	CVE-2020-16200	2024-11-21 14:06	2020-09-19	Show	GitHub Exploit DB Packet Storm

211773	6.3	MEDIUM Adjacent	philips	clinical_collaboration_platform	Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. When an attacker claims to have a given identity, the software does not prove or insufficiently proves the claim is correct.	-	CVE-2020-16198	2024-11-21 14:06	2020-09-19	Show	GitHub Exploit DB Packet Storm

211774	8.6	HIGH Network	1crm	1crm	An issue was discovered in 1CRM System through 8.6.7. An insecure direct object reference to internally stored files allows a remote attacker to access various sensitive information via an unauthenti…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-15958	2024-11-21 14:06	2020-09-19	Show	GitHub Exploit DB Packet Storm

211775	6.5	MEDIUM Network	gradle	enterprise	An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user (for the duratio…	CWE-346 Origin Validation Error	CVE-2020-15773	2024-11-21 14:06	2020-09-19	Show	GitHub Exploit DB Packet Storm

211776	8.8	HIGH Network	gradle	enterprise	An issue was discovered in Gradle Enterprise 2018.2 - 2020.2.4. The CSRF prevention token is stored in a request cookie that is not annotated as HttpOnly. An attacker with the ability to execute arbi…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-15776	2024-11-21 14:06	2020-09-18	Show	GitHub Exploit DB Packet Storm

211777	7.5	HIGH Network	gradle	enterprise	An issue was discovered in Gradle Enterprise 2017.1 - 2020.2.4. The /usage page of Gradle Enterprise conveys high level build information such as project names and build counts over time. This page i…	CWE-922 Insecure Storage of Sensitive Information	CVE-2020-15775	2024-11-21 14:06	2020-09-18	Show	GitHub Exploit DB Packet Storm

211778	6.8	MEDIUM Physics	gradle	enterprise	An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. An attacker with physical access to the browser of a user who has recently logged in to Gradle Enterprise and since closed their browse…	CWE-613 Insufficient Session Expiration	CVE-2020-15774	2024-11-21 14:06	2020-09-18	Show	GitHub Exploit DB Packet Storm

211779	4.9	MEDIUM Network	gradle	enterprise	An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a SAML identity provider, an XML metadata file can be uploaded by an administrator…	CWE-611 CWE-918 XXE Server-Side Request Forgery (SSRF)	CVE-2020-15772	2024-11-21 14:06	2020-09-18	Show	GitHub Exploit DB Packet Storm

211780	7.5	HIGH Network	gradle	enterprise_cache_node enterprise	An issue was discovered in Gradle Enterprise 2018.2 and Gradle Enterprise Build Cache Node 4.1. Cross-site transmission of cookie containing CSRF token allows remote attacker to bypass CSRF mitigatio…	CWE-311 Missing Encryption of Sensitive Data	CVE-2020-15771	2024-11-21 14:06	2020-09-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed