Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252461	7.5	危険	Michau Enterprises	-	SenseSites CommonSense CMS の article.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5037	2011-12-9 13:41	2011-11-2	Show	GitHub Exploit DB Packet Storm

252462	7.5	危険	Groone's World	-	Groone's Simple Contact Form における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-5038	2011-12-9 13:40	2011-11-2	Show	GitHub Exploit DB Packet Storm

252463	7.5	危険	ScriptsFeed.com	-	ScriptsFeed Recipes Listing Portal における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5039	2011-12-9 13:40	2011-11-2	Show	GitHub Exploit DB Packet Storm

252464	6.8	警告	John Bradshaw	-	Nucleus 用 NP_Gallery プラグインにおける PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-5040	2011-12-9 13:39	2011-11-2	Show	GitHub Exploit DB Packet Storm

252465	7.5	危険	John Bradshaw	-	Nucleus 用 NP_Gallery プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5041	2011-12-9 13:38	2011-11-2	Show	GitHub Exploit DB Packet Storm

252466	4.3	警告	Blue Constant Media Ltd	-	Joomla! 用 DJ-ArtGallery コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5042	2011-12-9 13:38	2011-11-2	Show	GitHub Exploit DB Packet Storm

252467	6	警告	Blue Constant Media Ltd	-	Joomla! 用 DJ-ArtGallery コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5043	2011-12-9 13:34	2011-11-2	Show	GitHub Exploit DB Packet Storm

252468	6	警告	Kanich	-	Joomla! 用 Search Log コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5044	2011-12-9 13:33	2011-11-2	Show	GitHub Exploit DB Packet Storm

252469	4.3	警告	Sell@Site	-	Smart ASP Survey におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5045	2011-12-9 13:32	2011-11-2	Show	GitHub Exploit DB Packet Storm

252470	5.1	警告	FFFTPプロジェクト	-	FFFTP における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-4266	2011-12-9 12:02	2011-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208941	5.5	MEDIUM Local	microsoft	windows_server_2019 windows_10 windows_server_2016	An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disc…	NVD-CWE-noinfo	CVE-2020-1330	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

208942	5.4	MEDIUM Network	microsoft	azure_devops_server	A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.	CWE-79 Cross-site Scripting	CVE-2020-1326	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

208943	4.9	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated attacker sends a specially crafted authentication request, aka…	NVD-CWE-noinfo	CVE-2020-1267	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

208944	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV…	NVD-CWE-noinfo	CVE-2020-1249	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

208945	8.8	HIGH Network	microsoft	365_apps	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1240	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

208946	7.8	HIGH Local	microsoft	windows_10 windows_server_2019 windows_server_2016	An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability,…	CWE-269 Improper Privilege Management	CVE-2020-1431	2024-11-21 14:10	2020-07-15	Show	GitHub Exploit DB Packet Storm

208947	6.5	MEDIUM Network	microsoft	windows_server_2008 windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_7 windows_rt_8.1 windows_server_2019	An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'.	NVD-CWE-noinfo	CVE-2020-1348	2024-11-21 14:10	2020-06-10	Show	GitHub Exploit DB Packet Storm

208948	5.9	MEDIUM Network	microsoft	visual_studio_live_share	An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure Vulnerability…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-1343	2024-11-21 14:10	2020-06-10	Show	GitHub Exploit DB Packet Storm

208949	5.4	MEDIUM Network	microsoft	nugetgallery	A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery Spoofing Vulnerability'.	CWE-79 Cross-site Scripting	CVE-2020-1340	2024-11-21 14:10	2020-06-10	Show	GitHub Exploit DB Packet Storm

208950	7.8	HIGH Local	microsoft	windows_server_2012 windows_10 windows_8.1 windows_server_2016 windows_rt_8.1 windows_server_2019	An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime Elevation of Privilege Vulnerability'. This CVE ID is unique from CV…	NVD-CWE-noinfo	CVE-2020-1334	2024-11-21 14:10	2020-06-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed