Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253251	4.3	警告	アップル	-	Apple Mac OS X のヘルプビューアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1373	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

253252	3.3	注意	アップル	-	Apple Mac OS X の Folder Manager における任意のフォルダを削除される脆弱性	CWE-59 リンク解釈の問題	CVE-2010-0546	2010-07-8 18:27	2010-06-15	Show	GitHub Exploit DB Packet Storm

253253	4.4	警告	アップル	-	Apple Mac OS X の DesktopServices におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-0545	2010-07-8 18:26	2010-06-15	Show	GitHub Exploit DB Packet Storm

253254	10	危険	ヒューレット・パッカード SGI IBM	-	rpc.pcnfsd の _msgout 関数における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-1039	2010-07-8 18:03	2010-05-18	Show	GitHub Exploit DB Packet Storm

253255	1.2	注意	IBM OpenBSD	-	OpenSSH における X11 転送ポートをハイジャックされる脆弱性	CWE-200 情報漏えい	CVE-2008-3259	2010-07-7 16:40	2008-07-22	Show	GitHub Exploit DB Packet Storm

253256	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるユーザインターフェースを偽装される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1581	2010-07-6 19:19	2009-05-12	Show	GitHub Exploit DB Packet Storm

253257	6.8	警告	アップル SquirrelMail Project	-	SquirrelMail におけるセッション固定の脆弱性	CWE-287 不適切な認証	CVE-2009-1580	2010-07-6 19:18	2009-05-11	Show	GitHub Exploit DB Packet Storm

253258	6.8	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-1579	2010-07-6 19:18	2009-05-10	Show	GitHub Exploit DB Packet Storm

253259	4.3	警告	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-1578	2010-07-6 19:18	2009-05-8	Show	GitHub Exploit DB Packet Storm

253260	8.5	危険	マイクロソフト	-	Microsoft IIS における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-1256	2010-07-5 17:52	2010-06-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
196581	7.5	HIGH Network	pysaml2_project canonical debian	pysaml2 ubuntu_linux debian_linux	PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature in…	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-5390	2024-11-21 14:34	2020-01-14	Show	GitHub Exploit DB Packet Storm

196582	8.8	HIGH Network	phpmyadmin suse debian	phpmyadmin suse_linux_enterprise_server debian_linux	In phpMyAdmin 4 before 4.9.4 and 5 before 5.0.1, SQL injection exists in the user accounts page. A malicious user could inject custom SQL in place of their own username when creating queries to this …	CWE-89 SQL Injection	CVE-2020-5504	2024-11-21 14:34	2020-01-10	Show	GitHub Exploit DB Packet Storm

196583	8.8	HIGH Network	small_crm_project	small_crm	PHPGurukul Small CRM v2.0 was found vulnerable to authentication bypass via SQL injection when logging into the administrator login page.	CWE-89 SQL Injection	CVE-2020-5511	2024-11-21 14:34	2020-01-9	Show	GitHub Exploit DB Packet Storm

196584	9.8	CRITICAL Network	phpgurukul	hostel_management_system	PHPGurukul Hostel Management System v2.0 allows SQL injection via the id parameter in the full-profile.php file.	CWE-89 SQL Injection	CVE-2020-5510	2024-11-21 14:34	2020-01-9	Show	GitHub Exploit DB Packet Storm

196585	9.8	CRITICAL Network	opservices	opmon	An issue was discovered in OpServices OpMon 9.3.1-1. Using password change parameters, an attacker could perform SQL injection without authentication.	CWE-89 SQL Injection	CVE-2020-5841	2024-11-21 14:34	2020-01-8	Show	GitHub Exploit DB Packet Storm

196586	6.1	MEDIUM Network	codologic	codoforum	Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage …	CWE-79 Cross-site Scripting	CVE-2020-5842	2024-11-21 14:34	2020-01-8	Show	GitHub Exploit DB Packet Storm

196587	6.1	MEDIUM Network	appspace	on-prem	In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.	CWE-79 Cross-site Scripting	CVE-2020-5393	2024-11-21 14:34	2020-01-8	Show	GitHub Exploit DB Packet Storm

196588	4.8	MEDIUM Network	codologic	codoforum	Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.	CWE-79 Cross-site Scripting	CVE-2020-5843	2024-11-21 14:34	2020-01-7	Show	GitHub Exploit DB Packet Storm

196589	8.8	HIGH Network	ahsay	cloud_backup_suite	An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.3.0.30 via a "PUT /obs/obm7/file/upload" request with the base64-encoded pathname in the X-RSW-custom-enc…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-5846	2024-11-21 14:34	2020-01-7	Show	GitHub Exploit DB Packet Storm

196590	6.8	MEDIUM Network	gilacms	gila_cms	Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal.	CWE-22 Path Traversal	CVE-2020-5513	2024-11-21 14:34	2020-01-7	Show	GitHub Exploit DB Packet Storm