Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250961	4.3	警告	Zoho Corporation	-	ManageEngine ADManager Plus におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5050	2011-11-25 11:43	2011-11-23	Show	GitHub Exploit DB Packet Storm

250962	7.5	危険	Zabbix	-	Zabbix の events.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5049	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

250963	4.3	警告	JoomlaTune Joomla!	-	JoomlaTune JComments におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5048	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

250964	7.5	危険	V-EVA	-	V-EVA Press Release Script における任意の SQL コマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2010-5047	2011-11-25 11:41	2011-11-23	Show	GitHub Exploit DB Packet Storm

250965	4.3	警告	ecoCMS	-	ecoCMS の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5046	2011-11-25 11:40	2011-11-23	Show	GitHub Exploit DB Packet Storm

250966	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5058	2011-11-25 10:14	2011-11-23	Show	GitHub Exploit DB Packet Storm

250967	7.5	危険	Alephsystem	-	CMS Ariadna の detResolucion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5057	2011-11-25 10:13	2011-11-23	Show	GitHub Exploit DB Packet Storm

250968	7.5	危険	IXXO Internet Solutions	-	XOBBIX コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5053	2011-11-25 10:08	2011-11-23	Show	GitHub Exploit DB Packet Storm

250969	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4332	2011-11-25 09:39	2011-03-24	Show	GitHub Exploit DB Packet Storm

250970	5	警告	Joomla!	-	Joomla! における任意のユーザのパスワードを変更される脆弱性	CWE-189 数値処理の問題	CVE-2011-4321	2011-11-25 09:38	2011-10-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196331	8.1	HIGH Network	cardgate adobe	cardgate_payments magento	An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows a…	CWE-346 Origin Validation Error	CVE-2020-8818	2024-11-21 14:39	2020-02-25	Show	GitHub Exploit DB Packet Storm

196332	9.8	CRITICAL Network	couchbase	couchbase_server	Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticat…	CWE-276 Incorrect Default Permissions	CVE-2020-9039	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

196333	8.8	HIGH Network	cacti fedoraproject opmantek opensuse debian	cacti fedora open-audit suse_package_hub debian_linux	graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.	CWE-78 OS Command	CVE-2020-8813	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

196334	8.8	HIGH Adjacent	dlink	dap-2610_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this …	CWE-287 Improper Authentication	CVE-2020-8862	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

196335	8.8	HIGH Adjacent	dlink	dap-1330_firmware	This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploi…	CWE-287 Improper Authentication	CVE-2020-8861	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

196336	8.0	HIGH Adjacent	google	android	This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User…	CWE-787 Out-of-bounds Write	CVE-2020-8860	2024-11-21 14:39	2020-02-22	Show	GitHub Exploit DB Packet Storm

196337	6.1	MEDIUM Network	westerndigital	mycloud.com	Western Digital mycloud.com before Web Version 2.2.0-134 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-8960	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

196338	7.8	HIGH Local	trendmicro	vulnerability_protection	Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory.	CWE-427 Uncontrolled Search Path Element	CVE-2020-8601	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

196339	9.8	CRITICAL Network	arista	dcs-7050qx-32s-r_firmware dcs-7050cx3-32s-r_firmware dcs-7280sram-48c6-r_firmware	Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices (and possibly other products) allow attackers to bypass intended TACACS+ shell restrictions via …	NVD-CWE-noinfo	CVE-2020-9015	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

196340	5.4	MEDIUM Network	machothemes	modula_image_gallery	A stored XSS vulnerability exists in the Modula Image Gallery plugin before 2.2.5 for WordPress. Successful exploitation of this vulnerability would allow an authenticated low-privileged user to inje…	CWE-79 Cross-site Scripting	CVE-2020-9003	2024-11-21 14:39	2020-02-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed