Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249001 5 警告 シマンテック - Windows Server 2003 上で稼働する Symantec Endpoint Protection におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2012-1821 2012-05-25 12:23 2012-05-22 Show GitHub Exploit DB Packet Storm
249002 9.3 危険 シマンテック - Symantec Endpoint Protection の Manager サービスにおけるファイル挿入攻撃の脆弱性 CWE-94
コード・インジェクション
CVE-2012-0295 2012-05-25 12:22 2012-05-22 Show GitHub Exploit DB Packet Storm
249003 5.8 警告 シマンテック - Symantec Endpoint Protection の Manager サービスにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-0294 2012-05-25 12:18 2012-05-22 Show GitHub Exploit DB Packet Storm
249004 7.2 危険 シマンテック - Symantec Endpoint Protection および Symantec Network Access Control におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0289 2012-05-25 12:17 2012-05-22 Show GitHub Exploit DB Packet Storm
249005 7.5 危険 ロジテック株式会社 - LAN-W300N/R シリーズにおけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1250 2012-05-25 12:04 2012-05-25 Show GitHub Exploit DB Packet Storm
249006 4.3 警告 Roundcube.net - Roundcube Webmail において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1253 2012-05-25 12:03 2012-05-25 Show GitHub Exploit DB Packet Storm
249007 4.3 警告 サイベース - Sybase 製 EAServer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4340 2012-05-25 12:02 2012-05-25 Show GitHub Exploit DB Packet Storm
249008 4.3 警告 RSSOwl - RSSOwl において任意のスクリプトが実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1252 2012-05-25 12:01 2012-05-25 Show GitHub Exploit DB Packet Storm
249009 7.5 危険 SIRINI.NET - GR Board における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-5091 2012-05-25 11:53 2012-05-24 Show GitHub Exploit DB Packet Storm
249010 6.4 警告 SIRINI.NET - GR Board におけるデータを変更または削除される脆弱性 CWE-287
不適切な認証
CVE-2011-5090 2012-05-25 11:52 2012-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210291 5.4 MEDIUM
Network
maccms maccms Maccms 10 contains a cross-site scripting (XSS) vulnerability in the Editing function under the Member module. This vulnerability is exploited via a crafted payload in the nickname text field. CWE-79
Cross-site Scripting
CVE-2020-21434 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
210292 6.5 MEDIUM
Network
hongcms_project hongcms HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit. NVD-CWE-noinfo
CVE-2020-21431 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
210293 6.1 MEDIUM
Network
maccms maccms A cross-site scripting (XSS) vulnerability in the parameter type_en of Maccms 10 allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. CWE-79
Cross-site Scripting
CVE-2020-21387 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
210294 8.8 HIGH
Network
maccms maccms A Cross-Site Request Forgery (CSRF) in the component admin.php/admin/type/info.html of Maccms 10 allows attackers to gain administrator privileges. CWE-352
 Origin Validation Error
CVE-2020-21386 2024-11-21 14:12 2021-10-5 Show GitHub Exploit DB Packet Storm
210295 6.1 MEDIUM
Network
jizhicms jizhicms JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie. CWE-79
Cross-site Scripting
CVE-2020-21228 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
210296 6.5 MEDIUM
Network
emlog emlog emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php. NVD-CWE-noinfo
CVE-2020-21014 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
210297 7.2 HIGH
Network
emlog emlog emlog v6.0.0 contains a SQL injection via /admin/comment.php. CWE-89
SQL Injection
CVE-2020-21013 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
210298 9.8 CRITICAL
Network
hotel_and_lodge_booking_management_system_project hotel_and_lodge_booking_management_system Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edi… CWE-89
SQL Injection
CVE-2020-21012 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
210299 5.4 MEDIUM
Network
jeecms jeecms JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. CWE-79
Cross-site Scripting
CVE-2020-20799 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
210300 9.8 CRITICAL
Network
flamecms_project flamecms FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. CWE-89
SQL Injection
CVE-2020-20797 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm