Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250901	7.5	危険	McKenzie Creations	-	Mckenzie Creations Virtual Real Estate Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5013	2011-12-9 14:04	2011-11-2	Show	GitHub Exploit DB Packet Storm

250902	7.5	危険	ELITE　LADDAERS	-	Elite Gaming Ladders における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5014	2011-12-9 14:03	2011-11-2	Show	GitHub Exploit DB Packet Storm

250903	7.5	危険	2daybiz	-	2daybiz Network Community Script における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5015	2011-12-9 14:00	2011-11-2	Show	GitHub Exploit DB Packet Storm

250904	7.5	危険	ELITE　LADDAERS	-	Elite Gaming Ladders における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5016	2011-12-9 14:00	2011-11-2	Show	GitHub Exploit DB Packet Storm

250905	7.5	危険	ELITE　LADDAERS	-	Elite Gaming Ladders における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5017	2011-12-9 13:59	2011-11-2	Show	GitHub Exploit DB Packet Storm

250906	4.3	警告	2daybiz	-	2daybiz Online Classified Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5018	2011-12-9 13:59	2011-11-2	Show	GitHub Exploit DB Packet Storm

250907	7.5	危険	2daybiz	-	2daybiz Online Classified Script における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5019	2011-12-9 13:58	2011-11-2	Show	GitHub Exploit DB Packet Storm

250908	7.5	危険	NetArt Media	-	NetArt Media iBoutique における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5020	2011-12-9 13:56	2011-11-2	Show	GitHub Exploit DB Packet Storm

250909	7.5	危険	Cramer Development	-	Digital Interchange Document Library における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5021	2011-12-9 13:56	2011-11-2	Show	GitHub Exploit DB Packet Storm

250910	7.5	危険	Jextensions	-	Joomla! 用 JExtensions JE Story Submit コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5022	2011-12-9 13:55	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196411	7.5	HIGH Network	gpgme_project redhat fedoraproject	gpgme openshift_container_platform openshift_container_platform_for_ibm_z openshift_container_platform_for_linuxone fedora enterprise_linux_workstation enterprise_linux_server en…	The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code executi…	CWE-416 Use After Free	CVE-2020-8945	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

196412	6.1	MEDIUM Network	chiyu-t	bf-430_firmware	Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field.	CWE-79 Cross-site Scripting	CVE-2020-8839	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

196413	7.5	HIGH Network	iktm	bearftp	Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of…	CWE-20 Improper Input Validation	CVE-2020-8815	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

196414	7.3	HIGH Network	istio redhat	istio openshift_service_mesh	Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access…	CWE-287 Improper Authentication	CVE-2020-8595	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

196415	6.5	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php.	NVD-CWE-noinfo	CVE-2020-8894	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

196416	7.5	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp.	NVD-CWE-noinfo	CVE-2020-8893	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

196417	8.1	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests.	NVD-CWE-noinfo	CVE-2020-8892	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

196418	5.9	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.	NVD-CWE-noinfo	CVE-2020-8891	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

196419	5.9	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of …	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-8890	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

196420	7.5	HIGH Network	xnau	participants_database	participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy pa…	CWE-89 SQL Injection	CVE-2020-8596	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed