Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
249671	7.8	危険	シスコシステムズ	-	複数の Cisco 製品における設定ファイルを置き換えられる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0364	2012-02-28 16:16	2012-02-23	Show	GitHub Exploit DB Packet Storm

249672	9	危険	シスコシステムズ	-	複数の Cisco 製品の Web インタフェースにおける任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-0363	2012-02-28 16:13	2012-02-23	Show	GitHub Exploit DB Packet Storm

249673	7.5	危険	Joomla!	-	Joomla! の Weblinks コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4938	2012-02-28 16:04	2011-10-9	Show	GitHub Exploit DB Packet Storm

249674	7.5	危険	RoBIT	-	Joomla! 用の Amblog コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4937	2012-02-28 15:56	2011-10-9	Show	GitHub Exploit DB Packet Storm

249675	7.5	危険	Webmaster-Tips	-	Joomla! 用の Slide Show コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4936	2012-02-28 15:54	2011-10-9	Show	GitHub Exploit DB Packet Storm

249676	7.5	危険	Khader Abbeb	-	Entrans の poll.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4935	2012-02-28 15:53	2011-10-9	Show	GitHub Exploit DB Packet Storm

249677	7.5	危険	SV Creation	-	Get Tube の video.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4934	2012-02-28 15:50	2011-10-9	Show	GitHub Exploit DB Packet Storm

249678	7.5	危険	Geeklog	-	Geeklog の filemgmt/singlefile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4933	2012-02-28 15:48	2011-10-9	Show	GitHub Exploit DB Packet Storm

249679	4.3	警告	Khader Abbeb	-	Entrans の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4932	2012-02-28 15:47	2011-10-9	Show	GitHub Exploit DB Packet Storm

249680	4.3	警告	atmail pty ltd	-	Atmail Webmail の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4930	2012-02-28 14:27	2011-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197981	7.4	HIGH Network	f5	nginx_controller	In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.	CWE-295 Improper Certificate Validation	CVE-2020-5864	2024-11-21 14:34	2020-04-24	Show	GitHub Exploit DB Packet Storm

197982	7.5	HIGH Network	sharp	aquos_sh-m02_firmware aquos_sh-rm02_firmware aquos_mini_sh-m03_firmware aquos_l2_firmware aquos_sense_lite_sh-m05_firmware aquos_sense_firmware aquos_compact_sh-m06_firmware aquo…	SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build num…	CWE-200 Information Exposure	CVE-2020-5571	2024-11-21 14:34	2020-04-23	Show	GitHub Exploit DB Packet Storm

197983	7.8	HIGH Local	plex	media_server	Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.	CWE-427 Uncontrolled Search Path Element	CVE-2020-5740	2024-11-21 14:34	2020-04-23	Show	GitHub Exploit DB Packet Storm

197984	8.4	HIGH Local	toshiba	password_tool_for_windows	An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO…	CWE-428 Unquoted Search Path or Element	CVE-2020-5569	2024-11-21 14:34	2020-04-20	Show	GitHub Exploit DB Packet Storm

197985	5.4	MEDIUM Network	tenable	tenable.sc	Stored XSS in Tenable.Sc before 5.14.0 could allow an authenticated remote attacker to craft a request to execute arbitrary script code in a user's browser session. Updated input validation technique…	CWE-79 Cross-site Scripting	CVE-2020-5737	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197986	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the export functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows the export of…	CWE-601 Open Redirect	CVE-2020-5733	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197987	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, he import functionality of the Data Exchange Module does not properly redirect to a login page when an unauthenticated user attempts to access it. This allows unauthenticate…	CWE-601 Open Redirect	CVE-2020-5732	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197988	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the app parameter for the ActiveVisit's page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5731	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197989	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the sessionLocation parameter for the login page is vulnerable to cross-site scripting.	CWE-79 Cross-site Scripting	CVE-2020-5730	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

197990	6.1	MEDIUM Network	openmrs	openmrs	In OpenMRS 2.9 and prior, the UI Framework Error Page reflects arbitrary, user-supplied input back to the browser, which can result in XSS. Any page that is able to trigger a UI Framework Error is su…	CWE-79 Cross-site Scripting	CVE-2020-5729	2024-11-21 14:34	2020-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed