Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250701 7.5 危険 anserv - PHP LOW BIDS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0646 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250702 7.5 危険 Phpcms - PHPCMS の data.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0645 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250703 7.5 危険 Phpcms - PHPCMS の include/admin/model_field.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2011-0644 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250704 6.8 警告 php link directory - phpLD の admin/conf_users_edit.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-0643 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250705 4.3 警告 network-13 - N-13 News の news/admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2011-0642 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250706 4.3 警告 heart5 - WordPress の StatPressCN プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-0641 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250707 6.9 警告 Linux
kernel.org		 - Linux の udev のデフォルト設定における任意のプログラムを実行される脆弱性 CWE-16
環境設定 		CVE-2011-0640 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
250708 6.9 警告 アップル - Apple の Mac OS X における任意のプログラムを実行される脆弱性 CWE-16
環境設定 		CVE-2011-0639 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
250709 6.9 警告 マイクロソフト - Microsoft Windows における任意のプログラムを実行される脆弱性 CWE-16
環境設定 		CVE-2011-0638 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
250710 4.9 警告 IBM - IBM AIX の FC SCSI プロトコルドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-0637 2012-03-27 18:42 2011-01-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208821 6.1 MEDIUM
Network 		sap fiori_launchpad_\(news_tile_application\) SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to use SAP Fiori Launchpad News tile Application to send malicious code, to a differen… CWE-79
Cross-site Scripting 		CVE-2020-26825 2024-11-21 14:20 2020-11-14 Show GitHub Exploit DB Packet Storm
208822 6.1 MEDIUM
Network 		ckeditor
oracle 		ckeditor
banking_platform
peoplesoft_enterprise_peopletools
agile_plm
commerce_merchandising
jd_edwards_enterpriseone_tools
financial_services_analytical_applications_infrastructure… 		A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML co… CWE-79
Cross-site Scripting 		CVE-2020-27193 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
208823 7.2 HIGH
Network 		sapplica sentrifugo In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected b… CWE-89
SQL Injection 		CVE-2020-26805 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
208824 8.8 HIGH
Network 		sapplica sentrifugo In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26804 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
208825 8.8 HIGH
Network 		sapplica sentrifugo In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious f… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-26803 2024-11-21 14:20 2020-11-13 Show GitHub Exploit DB Packet Storm
208826 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Legacy Ports Service, this has an… CWE-306
Missing Authentication for Critical Function 		CVE-2020-26824 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
208827 8.8 HIGH
Network 		tibco iprocess_workspace_browser The Core component of TIBCO Software Inc.'s TIBCO iProcess Workspace (Browser) contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a Cross Si… CWE-352
 Origin Validation Error 		CVE-2020-27146 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
208828 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Upgrade Diagnostics Agent Connection Serv… CWE-306
Missing Authentication for Critical Function 		CVE-2020-26823 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
208829 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the Outside Discovery Configuration Service, … CWE-306
Missing Authentication for Critical Function 		CVE-2020-26822 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm
208830 10.0 CRITICAL
Network 		sap solution_manager SAP Solution Manager (JAVA stack), version - 7.20, allows an unauthenticated attacker to compromise the system because of missing authorization checks in the SVG Converter Service, this has an impact… CWE-306
Missing Authentication for Critical Function 		CVE-2020-26821 2024-11-21 14:20 2020-11-11 Show GitHub Exploit DB Packet Storm