Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
248931 4.3 警告 Sebastian Heinlein
Canonical		 - Ubuntu で使用される Aptdaemon における任意のパッケージをインストールされる脆弱性 CWE-287
不適切な認証 		CVE-2012-0944 2012-06-6 16:08 2012-06-4 Show GitHub Exploit DB Packet Storm
248932 6.5 警告 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5093 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
248933 7.5 危険 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5092 2012-06-6 14:16 2012-06-4 Show GitHub Exploit DB Packet Storm
248934 6.5 警告 Best Practical Solutions - Best Practical Solutions RT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-4460 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
248935 3.5 注意 Best Practical Solutions - Best Practical Solutions RT におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4459 2012-06-6 14:14 2012-06-4 Show GitHub Exploit DB Packet Storm
248936 6.8 警告 Best Practical Solutions - Best Practical Solutions RT における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2011-4458 2012-06-6 14:12 2012-06-4 Show GitHub Exploit DB Packet Storm
248937 6.8 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-2085 2012-06-6 14:10 2012-06-4 Show GitHub Exploit DB Packet Storm
248938 4 警告 Best Practical Solutions - Best Practical Solutions RT における過去のパスワードハッシュを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2011-2084 2012-06-6 14:09 2012-06-4 Show GitHub Exploit DB Packet Storm
248939 4.3 警告 Best Practical Solutions - Best Practical Solutions RT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-2083 2012-06-6 14:07 2012-06-4 Show GitHub Exploit DB Packet Storm
248940 5 警告 Best Practical Solutions - Best Practical Solutions RT における平文パスワードを検出される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2011-2082 2012-06-6 14:05 2012-06-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210381 9.1 CRITICAL
Network 		halo halo There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not … CWE-611
XXE 		CVE-2020-21524 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210382 9.8 CRITICAL
Network 		halo halo A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arb… CWE-74
Injection 		CVE-2020-21523 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210383 9.8 CRITICAL
Network 		halo halo An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and … CWE-22
Path Traversal 		CVE-2020-21522 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210384 4.9 MEDIUM
Network 		frontaccounting frontaccounting An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php. CWE-22
Path Traversal 		CVE-2020-21244 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210385 9.8 CRITICAL
Network 		metinfo metinfo An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI. CWE-89
SQL Injection 		CVE-2020-20800 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210386 5.4 MEDIUM
Network 		elementor elementor_page_builder A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom a… CWE-79
Cross-site Scripting 		CVE-2020-20406 2024-11-21 14:12 2020-09-17 Show GitHub Exploit DB Packet Storm
210387 6.1 MEDIUM
Network 		codoforum codoforum Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.' CWE-79
Cross-site Scripting 		CVE-2020-21845 2024-11-21 14:12 2020-09-15 Show GitHub Exploit DB Packet Storm
210388 6.1 MEDIUM
Network 		sagemcom f\@st_3686_firmware Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp. CWE-79
Cross-site Scripting 		CVE-2020-21733 2024-11-21 14:12 2020-09-14 Show GitHub Exploit DB Packet Storm
210389 6.1 MEDIUM
Network 		rukovoditel rukovoditel Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename. CWE-79
Cross-site Scripting 		CVE-2020-21732 2024-11-21 14:12 2020-09-14 Show GitHub Exploit DB Packet Storm
210390 6.1 MEDIUM
Network 		gazie_project gazie Gazie 7.29 is affected by: Cross Site Scripting (XSS) via http://192.168.100.7/gazie/modules/config/admin_utente.php?user_name=amministratore&Update. An attacker can inject JavaScript code, and the w… CWE-79
Cross-site Scripting 		CVE-2020-21731 2024-11-21 14:12 2020-09-14 Show GitHub Exploit DB Packet Storm