Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250721	7.5	危険	BrotherScripts	-	Auto Dealer の info.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4974	2011-12-9 14:42	2011-11-1	Show	GitHub Exploit DB Packet Storm

250722	7.5	危険	Techjoomla	-	Joomla! 用の Techjoomla SocialAds における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4975	2011-12-9 14:41	2011-11-1	Show	GitHub Exploit DB Packet Storm

250723	4.3	警告	MetInfo	-	MetInfo の search/search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4976	2011-12-9 14:40	2011-11-1	Show	GitHub Exploit DB Packet Storm

250724	7.5	危険	Miniwork	-	Joomla! 用 Canteen コンポーネントの menu.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4977	2011-12-9 14:39	2011-11-1	Show	GitHub Exploit DB Packet Storm

250725	4.3	警告	Nicholas Berry	-	CANDID の image/view.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4978	2011-12-9 14:39	2011-11-1	Show	GitHub Exploit DB Packet Storm

250726	7.5	危険	Nicholas Berry	-	CANDID の image/view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4979	2011-12-9 14:38	2011-11-1	Show	GitHub Exploit DB Packet Storm

250727	7.5	危険	iScripts	-	iScripts ReserveLogic の packagedetails.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4980	2011-12-9 14:38	2011-11-1	Show	GitHub Exploit DB Packet Storm

250728	7.5	危険	YourFreeWorld.com	-	YourFreeWorld Banner Management における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4981	2011-12-9 14:37	2011-11-1	Show	GitHub Exploit DB Packet Storm

250729	7.5	危険	My Kazaam	-	My Kazaam Address & Contact Organizer における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4982	2011-12-9 14:36	2011-11-1	Show	GitHub Exploit DB Packet Storm

250730	7.5	危険	iScripts	-	iScripts CyberMatch における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4983	2011-12-9 14:36	2011-11-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210081	9.8	CRITICAL Network	mi	r3600_firmware	In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability.	CWE-77 Command Injection	CVE-2020-14100	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

210082	9.8	CRITICAL Network	mi	xiaomi_ai_speaker_firmware	Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-14096	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

210083	7.5	HIGH Network	bitcoin	bitcoin_core	Bitcoin Core 0.20.0 allows remote denial of service.	NVD-CWE-noinfo	CVE-2020-14198	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

210084	5.9	MEDIUM Network	apache oracle debian	activemq flexcube_private_banking communications_diameter_signaling_router debian_linux	Apache ActiveMQ uses LocateRegistry.createRegistry() to create the JMX RMI registry and binds the server to the "jmxrmi" entry. It is possible to connect to the registry without authentication and ca…	CWE-306 Missing Authentication for Critical Function	CVE-2020-13920	2024-11-21 14:02	2020-09-11	Show	GitHub Exploit DB Packet Storm

210085	5.7	MEDIUM Adjacent	health	covidsafe	In the COVIDSafe application through 1.0.21 for Android, unsafe use of the Bluetooth transport option in the GATT connection allows attackers to trick the application into establishing a connection o…	NVD-CWE-noinfo	CVE-2020-14292	2024-11-21 14:02	2020-09-10	Show	GitHub Exploit DB Packet Storm

210086	7.2	HIGH Network	zohocorp	manageengine_applications_manager	Zoho ManageEngine Applications Manager 14710 and before allows an authenticated admin user to upload a vulnerable jar in a specific location, which leads to remote code execution.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-14008	2024-11-21 14:02	2020-09-5	Show	GitHub Exploit DB Packet Storm

210087	6.1	MEDIUM Network	enghouse	web_chat	Enghouse Web Chat 6.2.284.34 allows XSS. When one enters their own domain name in the WebServiceLocation parameter, the response from the POST request is displayed, and any JavaScript returned from t…	CWE-79 Cross-site Scripting	CVE-2020-13972	2024-11-21 14:02	2020-09-4	Show	GitHub Exploit DB Packet Storm

210088	8.8	HIGH Network	dolibarr	dolibarr	Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-14209	2024-11-21 14:02	2020-09-3	Show	GitHub Exploit DB Packet Storm

210089	5.9	MEDIUM Network	apache netapp	cassandra oncommand_insight	In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to m…	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-13946	2024-11-21 14:02	2020-09-2	Show	GitHub Exploit DB Packet Storm

210090	7.5	HIGH Network	atlassian	jira jira_software_data_center jira_server jira_data_center	Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affecte…	NVD-CWE-noinfo	CVE-2020-14178	2024-11-21 14:02	2020-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed