Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250881 7.5 危険 Instant Php - Joomla! 用 Jobs Pro コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4994 2011-12-9 14:25 2011-11-1 Show GitHub Exploit DB Packet Storm
250882 7.5 危険 NeoJoomla - Joomla! 用 NeoRecruit コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4995 2011-12-9 14:23 2011-11-1 Show GitHub Exploit DB Packet Storm
250883 7.5 危険 esoftpro - esoftpro Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4996 2011-12-9 14:22 2011-11-1 Show GitHub Exploit DB Packet Storm
250884 7.5 危険 esoftpro - esoftpro Online Photo Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4999 2011-12-9 14:21 2011-11-1 Show GitHub Exploit DB Packet Storm
250885 7.5 危険 esoftpro - esoftpro Online Contact Manager の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-5001 2011-12-9 14:21 2011-11-1 Show GitHub Exploit DB Packet Storm
250886 4.3 警告 Exponent CMS project - Exponent CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5002 2011-12-9 14:20 2011-11-1 Show GitHub Exploit DB Packet Storm
250887 7.5 危険 Autartica - Joomla! 用 の AutarTimonial コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-5003 2011-12-9 14:20 2011-11-1 Show GitHub Exploit DB Packet Storm
250888 4.3 警告 VideoWhisper.com - VideoWhisper PHP 2 Way Video Chat コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4971 2011-12-9 14:19 2011-11-2 Show GitHub Exploit DB Packet Storm
250889 7.5 危険 OlyKit - OlyKit Swoopo Clone 2010 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4997 2011-12-9 14:18 2011-11-2 Show GitHub Exploit DB Packet Storm
250890 7.5 危険 Maulana Al Matien - ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-4998 2011-12-9 14:18 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196471 6.6 MEDIUM
Local
opensuse openldap2 A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to… - CVE-2020-8027 2024-11-21 14:38 2021-02-12 Show GitHub Exploit DB Packet Storm
196472 4.9 MEDIUM
Network
lenovo xclarity_administrator An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed … CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-8355 2024-11-21 14:38 2021-02-11 Show GitHub Exploit DB Packet Storm
196473 5.4 MEDIUM
Network
nextcloud nextcloud_server A missing link validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows execution of a stored XSS attack using Internet Explorer when saving a 'javascript:' URL in markdown format. CWE-79
Cross-site Scripting
CVE-2020-8294 2024-11-21 14:38 2021-02-4 Show GitHub Exploit DB Packet Storm
196474 8.8 HIGH
Adjacent
adt lifeshield_diy_hd_video_doorbell_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in HTTP interface of ADT LifeShield DIY HD Video Doorbell allows an attacker on the same network to e… CWE-77
Command Injection
CVE-2020-8101 2024-11-21 14:38 2021-02-2 Show GitHub Exploit DB Packet Storm
196475 7.5 HIGH
Network
nextcloud nextcloud_server A wrong check in Nextcloud Server 19 and prior allowed to perform a denial of service attack when resetting the password for a user. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-8295 2024-11-21 14:38 2021-01-27 Show GitHub Exploit DB Packet Storm
196476 6.5 MEDIUM
Network
nextcloud nextcloud_server A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage wi… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-8293 2024-11-21 14:38 2021-01-27 Show GitHub Exploit DB Packet Storm
196477 5.4 MEDIUM
Network
rocket.chat rocket.chat Rocket.Chat server before 3.9.0 is vulnerable to a self cross-site scripting (XSS) vulnerability via the drag & drop functionality in message boxes. CWE-79
Cross-site Scripting
CVE-2020-8292 2024-11-21 14:38 2021-01-27 Show GitHub Exploit DB Packet Storm
196478 5.4 MEDIUM
Network
rocket.chat rocket.chat The `specializedRendering` function in Rocket.Chat server before 3.9.2 allows a cross-site scripting (XSS) vulnerability by way of the `value` parameter. CWE-79
Cross-site Scripting
CVE-2020-8288 2024-11-21 14:38 2021-01-27 Show GitHub Exploit DB Packet Storm
196479 6.5 MEDIUM
Network
nodejs
debian
fedoraproject
oracle
siemens
node.js
debian_linux
fedora
graalvm
sinec_infrastructure_network_services
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for example, two Transfer-Encoding header fields). In this case, Node.js identifies th… CWE-444
HTTP Request Smuggling
CVE-2020-8287 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
196480 5.4 MEDIUM
Network
nextcloud contacts A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting
CVE-2020-8281 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm