Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251531	7.5	危険	raemedia	-	Rae Media INC Real Estate Single and Multi Agent System における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4738	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

251532	7.5	危険	hotwebscripts	-	HotWebScripts HotWeb Rentals の resorts.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4737	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

251533	7.5	危険	gatesoft	-	GateSoft DocuSafe の ECO.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4736	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

251534	7.5	危険	ecommercemax	-	Ecommercemax Solutions DGS の shoppingcart.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4735	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

251535	2.6	注意	amix	-	Skeletonz CMS 1.0 のコメント機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4734	2012-03-27 18:42	2011-02-15	Show	GitHub Exploit DB Packet Storm

251536	4.3	警告	LightNEasy	-	LightNEasy の LightNEasy.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4753	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

251537	6.8	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4752	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

251538	6	警告	LightNEasy	-	LightNEasy の LightNEasy.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4751	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

251539	6.8	警告	blogcms	-	BLOG:CMS の admin/libs/ADMIN.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4750	2012-03-27 18:42	2011-03-1	Show	GitHub Exploit DB Packet Storm

251540	6.8	警告	Zikula Foundation	-	Zikula におけるクロスサイトリクエストフォージェリ攻撃を誘発される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4729	2012-03-27 18:42	2011-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
202611	6.1	MEDIUM Network	icewarp	icewarp_server	In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.	CWE-79 Cross-site Scripting	CVE-2020-8512	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

202612	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=deleteadmin CSRF to delete a user.	CWE-352 Origin Validation Error	CVE-2020-8505	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

202613	6.5	MEDIUM Network	arox	school_management_software_php\/mysql	School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user.	CWE-352 Origin Validation Error	CVE-2020-8504	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

202614	6.5	MEDIUM Network	biscom	secure_file_transfer	Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-uploa…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8503	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

202615	4.3	MEDIUM Network	zohocorp	manageengine_remote_access_plus	An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined c…	NVD-CWE-noinfo	CVE-2020-8422	2024-11-21 14:38	2020-02-1	Show	GitHub Exploit DB Packet Storm

202616	9.8	CRITICAL Network	simplejobscript	simplejobscript	controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-8440	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

202617	9.8	CRITICAL Network	hashicorp	nomad	HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3.	CWE-295 Improper Certificate Validation	CVE-2020-7956	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

202618	5.3	MEDIUM Network	hashicorp	consul	HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3.	CWE-863 Incorrect Authorization	CVE-2020-7955	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

202619	7.5	HIGH Network	jetbrains	intellij_idea	In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3.	NVD-CWE-noinfo	CVE-2020-7914	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

202620	5.4	MEDIUM Network	gistpress_project	gistpress	XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor …	CWE-79 Cross-site Scripting	CVE-2020-8498	2024-11-21 14:38	2020-01-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed