Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249471	7.5	危険	t-dreams	-	T-Dreams Cars Ads Package の processview.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4829	2012-03-27 18:42	2011-08-24	Show	GitHub Exploit DB Packet Storm

249472	4.3	警告	SolarWinds	-	SolarWinds Orion NPM におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4828	2012-03-27 18:42	2011-08-24	Show	GitHub Exploit DB Packet Storm

249473	4.3	警告	Snitz	-	Snitz Forums の members.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4827	2012-03-27 18:42	2011-08-24	Show	GitHub Exploit DB Packet Storm

249474	7.5	危険	Snitz	-	Snitz Forums の members.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4826	2012-03-27 18:42	2011-08-24	Show	GitHub Exploit DB Packet Storm

249475	4.3	警告	WordPress.org pleer	-	WordPress 用の Twitter Feed プラグインの magpie_debug.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4825	2012-03-27 18:42	2011-08-24	Show	GitHub Exploit DB Packet Storm

249476	7.5	危険	bestsoftinc	-	BSI Advance Hotel Booking System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4814	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

249477	3.5	注意	Drupal scheepers de bruin	-	Drupal 用の Category Tokens モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4813	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

249478	6.5	警告	6kbbs	-	6kbbs における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4812	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

249479	4.3	警告	6kbbs	-	6kbbs の ajaxmember.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4811	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

249480	7.5	危険	awcm	-	AWCM における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4810	2012-03-27 18:42	2011-07-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199941	6.5	MEDIUM Network	cloudfoundry	cf-deployment capi-release	Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the j…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2020-5400	2024-11-21 14:34	2020-02-28	Show	GitHub Exploit DB Packet Storm

199942	8.8	HIGH Adjacent	nec	aterm_wg2600hs_firmware aterm_wf1200c_firmware aterm_wg1200cr_firmware	Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment t…	CWE-78 OS Command	CVE-2020-5524	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199943	8.0	HIGH Adjacent	nec	aterm_wg2600hs_firmware	Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.	CWE-78 OS Command	CVE-2020-5534	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199944	6.1	MEDIUM Network	nec	aterm_wg2600hs_firmware	Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2020-5533	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199945	8.0	HIGH Adjacent	nec	aterm_wg2600hs_firmware aterm_wf1200c_firmware aterm_wg1200cr_firmware	Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same net…	CWE-78 OS Command	CVE-2020-5525	2024-11-21 14:34	2020-02-21	Show	GitHub Exploit DB Packet Storm

199946	8.8	HIGH Network	realestateconnected	easy_property_listings	Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.	CWE-352 Origin Validation Error	CVE-2020-5530	2024-11-21 14:34	2020-02-18	Show	GitHub Exploit DB Packet Storm

199947	9.8	CRITICAL Network	mitsubishielectric	mi5122-vw_firmware q24dhccpu-v_firmware q24dhccpu-vg_firmware r12ccpu-v_firmware rd55up06-v_firmware	Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21…	NVD-CWE-noinfo	CVE-2020-5531	2024-11-21 14:34	2020-02-17	Show	GitHub Exploit DB Packet Storm

199948	4.3	MEDIUM Network	extrun	ilbo	ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images whic…	CWE-287 Improper Authentication	CVE-2020-5532	2024-11-21 14:34	2020-02-14	Show	GitHub Exploit DB Packet Storm

199949	7.4	HIGH Network	pivotal_software cloudfoundry	cloud_foundry_cf-deployment credhub	Cloud Foundry CredHub, versions prior to 2.5.10, connects to a MySQL database without TLS even when configured to use TLS. A malicious user with access to the network between CredHub and its MySQL da…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-5399	2024-11-21 14:34	2020-02-13	Show	GitHub Exploit DB Packet Storm

199950	3.3	LOW Local	symantec	endpoint_protection_manager	Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memo…	CWE-125 Out-of-bounds Read	CVE-2020-5831	2024-11-21 14:34	2020-02-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed