Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249261 7.5 危険 Joomla!
Jextensions
- Joomla! のJE Ajax Event Calendar コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4365 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249262 4.3 警告 dadabik - DaDaBIK における保護メカニズムを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4364 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249263 6.8 警告 mrcgiguy - MCG FreeTicket の contact.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4363 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249264 7.5 危険 Micronetsoft - MicroNetsoft RV Dealer Website における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4362 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249265 4.3 警告 jurpo - Jurpopage の url-gateway.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4361 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249266 7.5 危険 jurpo - Jurpopage の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4360 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249267 7.5 危険 jurpo - Jurpopage の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4359 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249268 4.3 警告 mrcgiguy - MCG Guestbook の gb.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4358 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249269 7.5 危険 boka - SiteEngine の comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4357 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
249270 7.5 危険 site2nite - Site2Nite Big Truck Broker の news_default.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4356 2012-03-27 18:42 2010-12-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198841 9.6 CRITICAL
Network
google
debian
chrome
debian_linux
Use after free in speech recognizer in Google Chrome prior to 81.0.4044.113 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. CWE-416
 Use After Free
CVE-2020-6457 2024-11-21 14:35 2020-05-21 Show GitHub Exploit DB Packet Storm
198842 5.5 MEDIUM
Local
gonitro nitro_pro An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory access resulting in… CWE-824
 Access of Uninitialized Pointer
CVE-2020-6093 2024-11-21 14:35 2020-05-19 Show GitHub Exploit DB Packet Storm
198843 7.8 HIGH
Local
gonitro nitro_pro An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code… CWE-190
 Integer Overflow or Wraparound
CVE-2020-6092 2024-11-21 14:35 2020-05-19 Show GitHub Exploit DB Packet Storm
198844 8.8 HIGH
Network
gonitro nitro_pro An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which can lead to remote code execution. An a… CWE-416
 Use After Free
CVE-2020-6074 2024-11-21 14:35 2020-05-19 Show GitHub Exploit DB Packet Storm
198845 8.8 HIGH
Network
sap application_server Service Data Download in SAP Application Server ABAP (ST-PI, before versions 2008_1_46C, 2008_1_620, 2008_1_640, 2008_1_700, 2008_1_710, 740) allows an attacker to inject code that can be executed by… CWE-94
Code Injection
CVE-2020-6262 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
198846 6.5 MEDIUM
Network
sap adaptive_server_enterprise Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information which would otherwise be restricted leading to Missing Authorization Check. CWE-862
 Missing Authorization
CVE-2020-6259 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
198847 6.5 MEDIUM
Network
sap identity_management SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to … CWE-862
 Missing Authorization
CVE-2020-6258 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
198848 5.4 MEDIUM
Network
sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform (CMC and BI Launchpad) 4.2 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting vulnerability. CWE-79
Cross-site Scripting
CVE-2020-6257 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
198849 4.3 MEDIUM
Network
sap master_data_governance SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authoriz… CWE-862
 Missing Authorization
CVE-2020-6256 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
198850 6.1 MEDIUM
Network
sap enterprise_threat_detection SAP Enterprise Threat Detection, versions 1.0, 2.0, does not sufficiently encode error response pages in case of errors, allowing XSS payload reflecting in the response, leading to reflected Cross Si… CWE-79
Cross-site Scripting
CVE-2020-6254 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm