Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249151 7.5 危険 useasdf_4444 - Hotel Booking Portal の getcity.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1672 2012-04-12 16:57 2011-04-11 Show GitHub Exploit DB Packet Storm
249152 4.3 警告 Novell - Novell ZENworks Configuration Management におけるクロスサイトトレーシング攻撃を誘発される脆弱性 CWE-200
情報漏えい
CVE-2012-2223 2012-04-12 16:53 2012-02-8 Show GitHub Exploit DB Packet Storm
249153 7.8 危険 ソニー株式会社 - ソニー製 Bravia TV におけるサービス運用妨害 (機能停止またはデバイスクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2210 2012-04-12 16:52 2012-04-11 Show GitHub Exploit DB Packet Storm
249154 4.3 警告 DNN - DotNetNuke の Telerik HTML エディタにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1036 2012-04-12 16:06 2011-11-1 Show GitHub Exploit DB Packet Storm
249155 4.3 警告 DNN - DotNetNuke におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1030 2012-04-12 16:05 2012-02-1 Show GitHub Exploit DB Packet Storm
249156 7.5 危険 アドビシステムズ - Adobe Reader および Acrobat の JavaScript API における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0777 2012-04-12 15:08 2012-04-10 Show GitHub Exploit DB Packet Storm
249157 10 危険 アドビシステムズ - Adobe Reader のインストーラにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0776 2012-04-12 15:05 2012-04-10 Show GitHub Exploit DB Packet Storm
249158 10 危険 アドビシステムズ - Adobe Reader および Acrobat の JavaScript 実装における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0775 2012-04-12 14:57 2012-04-10 Show GitHub Exploit DB Packet Storm
249159 10 危険 アドビシステムズ - Adobe Reader および Acrobat における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0774 2012-04-12 14:55 2012-04-10 Show GitHub Exploit DB Packet Storm
249160 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2012-0163 2012-04-12 14:15 2012-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212651 5.4 MEDIUM
Network
naviwebs navigate_cms An issue was discovered in Navigate CMS 2.8 and 2.9 r1433. The query parameter fid on the resource navigate.php does not perform sufficient data validation and/or encoding, making it vulnerable to re… CWE-79
Cross-site Scripting
CVE-2020-14014 2024-11-21 14:02 2020-06-25 Show GitHub Exploit DB Packet Storm
212652 5.4 MEDIUM
Network
solarwinds orion_network_performance_monitor
orion_web_performance_monitor
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a name of an alert definition. CWE-79
Cross-site Scripting
CVE-2020-14007 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212653 5.4 MEDIUM
Network
solarwinds orion_network_performance_monitor
orion_web_performance_monitor
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows XSS via a Responsible Team. CWE-79
Cross-site Scripting
CVE-2020-14006 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212654 8.8 HIGH
Network
solarwinds orion_network_performance_monitor
orion_web_performance_monitor
Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event. NVD-CWE-noinfo
CVE-2020-14005 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212655 5.4 MEDIUM
Network
paessler prtg_network_monitor XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScri… CWE-79
Cross-site Scripting
CVE-2020-14073 2024-11-21 14:02 2020-06-24 Show GitHub Exploit DB Packet Storm
212656 7.5 HIGH
Network
rakuten viber Viber for Windows up to 13.2.0.39 does not properly quote its custom URI handler. A malicious website could launch Viber with arbitrary parameters, forcing a victim to send an NTLM authentication req… CWE-88
Argument Injection
CVE-2020-14049 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
212657 8.8 HIGH
Network
kordil_edms_project kordil_edms documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folder. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-13887 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
212658 5.4 MEDIUM
Network
kordil_edms_project kordil_edms Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php. CWE-79
Cross-site Scripting
CVE-2020-13888 2024-11-21 14:02 2020-06-23 Show GitHub Exploit DB Packet Storm
212659 8.2 HIGH
Network
ibi webfocus_business_intelligence In WebFOCUS Business Intelligence 8.0 (SP6), the administration portal allows remote attackers to read arbitrary local files or forge server-side HTTP requests via a crafted HTTP request to /ibi_apps… CWE-611
XXE
CVE-2020-14204 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm
212660 8.8 HIGH
Network
ibi webfocus_business_intelligence WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of a… CWE-352
 Origin Validation Error
CVE-2020-14203 2024-11-21 14:02 2020-06-22 Show GitHub Exploit DB Packet Storm