Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249911 7.5 危険 PreProject.com - PreProjects Pre Online Tests Generator Pro の takefreestart.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4776 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249912 7.5 危険 AuraCMS - AuraCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4774 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249913 4.3 警告 matteoiammarrone - S-CMS の blocks/lang.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4772 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
249914 4 警告 IBM - IBM Tivoli Directory Server (TDS) のプロキシサーバ実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4789 2012-03-27 18:42 2010-10-29 Show GitHub Exploit DB Packet Storm
249915 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-4788 2012-03-27 18:42 2010-02-10 Show GitHub Exploit DB Packet Storm
249916 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4787 2012-03-27 18:42 2010-06-9 Show GitHub Exploit DB Packet Storm
249917 4 警告 IBM - IBM TDS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4786 2012-03-27 18:42 2010-04-23 Show GitHub Exploit DB Packet Storm
249918 4 警告 IBM - IBM TDS の do_extendedOp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-4785 2012-03-27 18:42 2010-01-20 Show GitHub Exploit DB Packet Storm
249919 5 警告 nicholas thompson - Drupal 用の Relevant Content モジュールにおける制限されたノードタイトルおよびリレーションシップを発見される脆弱性 CWE-20
不適切な入力確認
CVE-2010-4775 2012-03-27 18:42 2010-11-17 Show GitHub Exploit DB Packet Storm
249920 7.5 危険 matteoiammarrone - S-CMS の viewforum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4771 2012-03-27 18:42 2011-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200641 5.4 MEDIUM
Network
f5 big-ip_access_policy_manager In BIG-IP APM portal access on versions 15.0.0-15.1.0, 14.0.0-14.1.2.3, 13.1.0-13.1.3.2, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, when backend servers serve HTTP pages with special JavaScript code, this c… CWE-79
Cross-site Scripting
CVE-2020-5853 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm
200642 7.5 HIGH
Network
f5 big-ip_local_traffic_manager
big-ip_advanced_firewall_manager
big-ip_application_acceleration_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
Undisclosed traffic patterns received may cause a disruption of service to the Traffic Management Microkernel (TMM). This vulnerability affects TMM through a virtual server configured with a FastL4 p… NVD-CWE-noinfo
CVE-2020-5852 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm
200643 4.6 MEDIUM
Physics
f5 big-ip_local_traffic_manager
big-ip_advanced_firewall_manager
big-ip_application_acceleration_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<…
On impacted versions and platforms the Trusted Platform Module (TPM) system integrity check cannot detect modifications to specific system components. This issue only impacts specific engineering hot… NVD-CWE-Other
CVE-2020-5851 2024-11-21 14:34 2020-01-15 Show GitHub Exploit DB Packet Storm
200644 7.5 HIGH
Network
pysaml2_project
canonical
debian
pysaml2
ubuntu_linux
debian_linux
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature in… CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-5390 2024-11-21 14:34 2020-01-14 Show GitHub Exploit DB Packet Storm
200645 8.8 HIGH
Network
phpmyadmin
suse
debian
phpmyadmin
suse_linux_enterprise_server
debian_linux
In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this … CWE-89
SQL Injection
CVE-2020-5504 2024-11-21 14:34 2020-01-10 Show GitHub Exploit DB Packet Storm
200646 8.8 HIGH
Network
small_crm_project small_crm PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page. CWE-89
SQL Injection
CVE-2020-5511 2024-11-21 14:34 2020-01-9 Show GitHub Exploit DB Packet Storm
200647 9.8 CRITICAL
Network
phpgurukul hostel_management_system PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file. CWE-89
SQL Injection
CVE-2020-5510 2024-11-21 14:34 2020-01-9 Show GitHub Exploit DB Packet Storm
200648 9.8 CRITICAL
Network
opservices opmon An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication. CWE-89
SQL Injection
CVE-2020-5841 2024-11-21 14:34 2020-01-8 Show GitHub Exploit DB Packet Storm
200649 6.1 MEDIUM
Network
codologic codoforum Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage … CWE-79
Cross-site Scripting
CVE-2020-5842 2024-11-21 14:34 2020-01-8 Show GitHub Exploit DB Packet Storm
200650 6.1 MEDIUM
Network
appspace on-prem In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS. CWE-79
Cross-site Scripting
CVE-2020-5393 2024-11-21 14:34 2020-01-8 Show GitHub Exploit DB Packet Storm