Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251871 7.5 危険 WebAsyst - WebAsyst Shop-Script の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4859 2012-02-9 11:05 2011-10-5 Show GitHub Exploit DB Packet Storm
251872 5 警告 Joerg Risse - DNET Live-Stats の team.rc5-72.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4858 2012-02-9 11:04 2011-10-5 Show GitHub Exploit DB Packet Storm
251873 7.5 危険 Curtiss Grymala - CAG CMS の click.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4857 2012-02-9 11:03 2011-10-5 Show GitHub Exploit DB Packet Storm
251874 7.5 危険 ASP indir - xWeblog の arsiv.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4856 2012-02-9 11:03 2011-10-5 Show GitHub Exploit DB Packet Storm
251875 7.5 危険 ASP indir - xWeblog の oku.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4855 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
251876 6.8 警告 Zuitu - Zuitu の ajax/coupon.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4854 2012-02-9 11:02 2011-10-5 Show GitHub Exploit DB Packet Storm
251877 7.5 危険 Chill Creations - Joomla! 用 ccInvoices コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4853 2012-02-9 11:01 2011-10-5 Show GitHub Exploit DB Packet Storm
251878 7.5 危険 Netshine Software - Joomla! 用 nBill コンポーネントの netinvoice.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7302 2012-02-9 11:01 2008-06-27 Show GitHub Exploit DB Packet Storm
251879 7.5 危険 Sclek - jSite の admin/login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7301 2012-02-9 11:00 2011-10-5 Show GitHub Exploit DB Packet Storm
251880 8.5 危険 サン・マイクロシステムズ - Sun Solaris および OpenSolaris における MAC のポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7300 2012-02-9 10:59 2011-10-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208601 6.1 MEDIUM
Network 		jizhicms jizhicms JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie. CWE-79
Cross-site Scripting 		CVE-2020-21228 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208602 6.5 MEDIUM
Network 		emlog emlog emlog v6.0.0 contains an arbitrary file deletion vulnerability in admin/plugin.php. NVD-CWE-noinfo
CVE-2020-21014 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208603 7.2 HIGH
Network 		emlog emlog emlog v6.0.0 contains a SQL injection via /admin/comment.php. CWE-89
SQL Injection 		CVE-2020-21013 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208604 9.8 CRITICAL
Network 		hotel_and_lodge_booking_management_system_project hotel_and_lodge_booking_management_system Sourcecodester Hotel and Lodge Management System 2.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the email parameter to the edi… CWE-89
SQL Injection 		CVE-2020-21012 2024-11-21 14:12 2021-10-2 Show GitHub Exploit DB Packet Storm
208605 5.4 MEDIUM
Network 		jeecms jeecms JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. CWE-79
Cross-site Scripting 		CVE-2020-20799 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208606 9.8 CRITICAL
Network 		flamecms_project flamecms FlameCMS 3.3.5 contains a time-based blind SQL injection vulnerability in /account/register.php. CWE-89
SQL Injection 		CVE-2020-20797 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208607 9.8 CRITICAL
Network 		flamecms_project flamecms FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter. CWE-89
SQL Injection 		CVE-2020-20796 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208608 7.2 HIGH
Network 		tendacn ac9_firmware A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /gofo… CWE-787
 Out-of-bounds Write 		CVE-2020-20746 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208609 7.5 HIGH
Network 		rudp_project rudp rudp v0.6 was discovered to contain a memory leak in the component main.c. CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-20665 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm
208610 6.5 MEDIUM
Network 		libiec_iccp_mod_project libiec_iccp_mod libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c. NVD-CWE-noinfo
CVE-2020-20664 2024-11-21 14:12 2021-10-1 Show GitHub Exploit DB Packet Storm