Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249271	4.3	警告	Pligg	-	Pligg CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2436	2012-05-29 14:57	2012-05-27	Show	GitHub Exploit DB Packet Storm

249272	4.3	警告	osCommerce	-	OSCommerce Online Merchant におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2935	2012-05-29 14:18	2012-05-27	Show	GitHub Exploit DB Packet Storm

249273	2.6	注意	osCommerce	-	OSCommerce Online Merchant におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1792	2012-05-29 14:18	2012-05-27	Show	GitHub Exploit DB Packet Storm

249274	4.3	警告	The Support Incident Tracker Project	-	Support Incident Tracker におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2235	2012-05-29 14:14	2012-05-27	Show	GitHub Exploit DB Packet Storm

249275	2.6	注意	Zen Cart	-	Zen Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1413	2012-05-29 14:13	2012-05-27	Show	GitHub Exploit DB Packet Storm

249276	10	危険	Seagate Technology LLC	-	Seagate BlackArmor NAS に脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2568	2012-05-29 13:47	2012-05-24	Show	GitHub Exploit DB Packet Storm

249277	4.9	警告	Linux	-	Linux Kernel の crypto/ghash-generic.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2011-4081	2012-05-28 16:58	2012-05-24	Show	GitHub Exploit DB Packet Storm

249278	4	警告	Linux	-	Linux Kernel の sysrq_sysctl_handler 関数におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4080	2012-05-28 16:55	2012-05-24	Show	GitHub Exploit DB Packet Storm

249279	5.4	警告	Linux	-	Linux Kernel の dma_rx 関数におけるサービス運用妨害 (システムクラッシュ) の脆弱性	CWE-119 バッファエラー	CVE-2011-3359	2012-05-28 16:50	2012-05-24	Show	GitHub Exploit DB Packet Storm

249280	4.9	警告	Linux	-	Linux Kernel の fuse_notify_inval_entry 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3353	2012-05-28 16:49	2012-05-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209881	6.1	MEDIUM Network	online_bus_booking_system_project	online_bus_booking_system	In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.	CWE-79 Cross-site Scripting	CVE-2020-25272	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209882	5.4	MEDIUM Network	phpgurukul	hospital_management_system	PHPGurukul hospital-management-system-in-php 4.0 allows XSS via admin/patient-search.php, doctor/search.php, book-appointment.php, doctor/appointment-history.php, or admin/appointment-history.php.	CWE-79 Cross-site Scripting	CVE-2020-25271	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209883	5.4	MEDIUM Network	phpgurukul	hostel_management_system	PHPGurukul hostel-management-system 2.1 allows XSS via Guardian Name, Guardian Relation, Guardian Contact no, Address, or City.	CWE-79 Cross-site Scripting	CVE-2020-25270	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209884	7.1	HIGH Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/addons/uninstall/anomaly.module.blocks URI: an arbitrary plugin will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25263	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209885	4.3	MEDIUM Network	pyrocms	pyrocms	PyroCMS 3.7 is vulnerable to cross-site request forgery (CSRF) via the admin/pages/delete/ URI: pages will be deleted.	CWE-352 Origin Validation Error	CVE-2020-25262	2024-11-21 14:17	2020-10-8	Show	GitHub Exploit DB Packet Storm

209886	5.4	MEDIUM Network	getsymphony	symphony	Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject arbitrary web script or HTML to fields['body'] param via events\event.publish_article.php	CWE-79 Cross-site Scripting	CVE-2020-25343	2024-11-21 14:17	2020-10-7	Show	GitHub Exploit DB Packet Storm

209887	5.3	MEDIUM Network	pritunl	pritunl	Pritunl 1.29.2145.25 allows attackers to enumerate valid VPN usernames via a series of /auth/session login attempts. Initially, the server will return error 401. However, if the username is valid, th…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-25200	2024-11-21 14:17	2020-10-2	Show	GitHub Exploit DB Packet Storm

209888	4.8	MEDIUM Network	mantisbt	mantisbt	An issue was discovered in MantisBT before 2.24.3. When editing an Issue in a Project where a Custom Field with a crafted Regular Expression property is used, improper escaping of the corresponding f…	CWE-79 Cross-site Scripting	CVE-2020-25288	2024-11-21 14:17	2020-10-1	Show	GitHub Exploit DB Packet Storm

209889	8.8	HIGH Network	observium	observium	An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to the fact that there is an unrestricted po…	CWE-22 CWE-434 Path Traversal Unrestricted Upload of File with Dangerous Type	CVE-2020-25149	2024-11-21 14:17	2020-09-26	Show	GitHub Exploit DB Packet Storm

209890	6.1	MEDIUM Network	observium	observium	An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting (XSS) due to the fact that it is possible to inject and store malicious …	CWE-79 Cross-site Scripting	CVE-2020-25148	2024-11-21 14:17	2020-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed