Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 4:07 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253201	4.3	警告	ES APP Group	-	ES ファイルエクスプローラーにおけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0322	2012-03-5 12:02	2012-03-5	Show	GitHub Exploit DB Packet Storm

253202	4.3	警告	Ulysses	-	WordPress 用 Black-LetterHead テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3865	2012-03-5 11:09	2011-09-28	Show	GitHub Exploit DB Packet Storm

253203	4.3	警告	Soma Design	-	WordPress 用 Erudite テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3864	2012-03-5 11:08	2011-09-28	Show	GitHub Exploit DB Packet Storm

253204	4.3	警告	Postskriptum	-	WordPress 用 RedLine テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3863	2012-03-5 11:08	2011-09-28	Show	GitHub Exploit DB Packet Storm

253205	4.3	警告	Adazing	-	WordPress 用 Morning Coffee テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3862	2012-03-5 11:08	2011-09-28	Show	GitHub Exploit DB Packet Storm

253206	4.3	警告	WebMinimalist	-	WordPress 用 Web Minimalist 200901 テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3861	2012-03-5 11:07	2011-09-28	Show	GitHub Exploit DB Packet Storm

253207	4.3	警告	One Designs	-	WordPress 用 Cover WP テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3860	2012-03-5 11:07	2011-09-28	Show	GitHub Exploit DB Packet Storm

253208	4.3	警告	ThemeHybrid	-	WordPress 用 Trending テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3859	2012-03-5 11:06	2011-09-28	Show	GitHub Exploit DB Packet Storm

253209	4.3	警告	zespia	-	WordPress 用 Pixiv Custom テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3858	2012-03-5 11:06	2011-09-28	Show	GitHub Exploit DB Packet Storm

253210	4.3	警告	Antisocial Media LLC	-	WordPress 用 Antisnews テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-3857	2012-03-5 11:05	2011-09-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
203051	9.8	CRITICAL Network	biscom	secure_file_transfer	Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server.	NVD-CWE-Other	CVE-2020-8796	2024-11-21 14:39	2020-02-8	Show	GitHub Exploit DB Packet Storm

203052	6.1	MEDIUM Network	synaptivemedical	clearcanvas	Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product ca…	CWE-79 Cross-site Scripting	CVE-2020-8788	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203053	9.8	CRITICAL Network	eyesofnetwork	eyesofnetwork	An issue was discovered in EyesOfNetwork 5.3. The EyesOfNetwork API 2.4.2 is prone to SQL injection, allowing an unauthenticated attacker to perform various tasks such as authentication bypass via th…	CWE-89 SQL Injection	CVE-2020-8656	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203054	8.8	HIGH Network	eyesofnetwork	eyesofnetwork	An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to run arbitrary OS commands via the /module/module_frame/index…	CWE-78 OS Command	CVE-2020-8654	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203055	9.8	CRITICAL Network	simplejobscript	simplejobscript	An issue was discovered in Simplejobscript.com SJS through 1.66. There is an unauthenticated SQL injection via the job applications search function. The vulnerable parameter is job_id. The function i…	CWE-89 SQL Injection	CVE-2020-8645	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203056	9.8	CRITICAL Network	revmakx	infinitewp_client	The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in.	CWE-862 Missing Authorization	CVE-2020-8772	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203057	9.8	CRITICAL Network	wptimecapsule	wp_time_capsule	The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of adminis…	CWE-287 Improper Authentication	CVE-2020-8771	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203058	9.8	CRITICAL Network	opservices	opmon	An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution .	CWE-306 Missing Authentication for Critical Function	CVE-2020-8636	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203059	5.6	MEDIUM Network	libslirp_project debian opensuse	libslirp debian_linux leap	In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.	CWE-120 Classic Buffer Overflow	CVE-2020-8608	2024-11-21 14:39	2020-02-7	Show	GitHub Exploit DB Packet Storm

203060	8.8	HIGH Network	bestwebsoft	htaccess	The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the p…	CWE-352 Origin Validation Error	CVE-2020-8658	2024-11-21 14:39	2020-02-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed