Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254021 6.8 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-0629 2011-06-28 12:22 2011-06-14 Show GitHub Exploit DB Packet Storm
254022 10 危険 アドビシステムズ
ターボリナックス
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-2110 2011-06-28 12:21 2011-06-14 Show GitHub Exploit DB Packet Storm
254023 5 警告 ISC, Inc.
ターボリナックス
- ISC DHCP の dhcpd におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-16
環境設定
CVE-2009-1892 2011-06-28 12:19 2009-10-7 Show GitHub Exploit DB Packet Storm
254024 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1266 2011-06-28 12:18 2011-06-14 Show GitHub Exploit DB Packet Storm
254025 4.3 警告 マイクロソフト - Windows Server 2003 および 2008 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1264 2011-06-28 12:17 2011-06-14 Show GitHub Exploit DB Packet Storm
254026 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1261 2011-06-28 12:16 2011-06-14 Show GitHub Exploit DB Packet Storm
254027 4.3 警告 マイクロソフト - Microsoft Internet Explorer 6 から 8 における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-1258 2011-06-28 12:16 2011-06-14 Show GitHub Exploit DB Packet Storm
254028 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1256 2011-06-28 12:15 2011-06-14 Show GitHub Exploit DB Packet Storm
254029 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 の HTML+TIME における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1255 2011-06-28 12:14 2011-06-14 Show GitHub Exploit DB Packet Storm
254030 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2011-1254 2011-06-28 12:13 2011-06-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208521 6.1 MEDIUM
Network
hongcms_project hongcms Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop. CWE-79
Cross-site Scripting
CVE-2020-21643 2024-11-21 14:12 2023-04-29 Show GitHub Exploit DB Packet Storm
208522 8.8 HIGH
Network
fluentd fluentd-ui
fluentd
An issue was discovered in Fluent Fluentd v.1.8.0 and Fluent-ui v.1.2.2 allows attackers to gain escalated privileges and execute arbitrary code due to a default password. NVD-CWE-noinfo
CVE-2020-21514 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208523 9.6 CRITICAL
Network
netgate pfsense
pfsense_acme_package
Cross Site Scripting vulnerability found in Netgate pfSense 2.4.4 and ACME package v.0.6.3 allows attackers to execute arbitrary code via the RootFolder field of acme_certificates.php. CWE-79
Cross-site Scripting
CVE-2020-21487 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208524 8.8 HIGH
Network
phpmywind phpmywind SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page. CWE-89
SQL Injection
CVE-2020-21060 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208525 9.8 CRITICAL
Network
publiccms publiccms SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl. CWE-89
SQL Injection
CVE-2020-20915 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208526 9.8 CRITICAL
Network
publiccms publiccms SQL Injection vulnerability found in San Luan PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via the sql parameter. CWE-89
SQL Injection
CVE-2020-20914 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208527 9.8 CRITICAL
Network
mingsoft mcms SQL Injection vulnerability found in Ming-Soft MCMS v.4.7.2 allows a remote attacker to execute arbitrary code via basic_title parameter. CWE-89
SQL Injection
CVE-2020-20913 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208528 6.1 MEDIUM
Network
kitesky kitecms Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter. CWE-79
Cross-site Scripting
CVE-2020-20522 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208529 6.1 MEDIUM
Network
kitesky kitecms Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter. CWE-79
Cross-site Scripting
CVE-2020-20521 2024-11-21 14:12 2023-04-5 Show GitHub Exploit DB Packet Storm
208530 9.8 CRITICAL
Network
uqcms uqcms SQL Injection vulnerability in file home\controls\cart.class.php in UQCMS 2.1.3, allows attackers execute arbitrary commands via the cookie_cart parameter to /index.php/cart/num. CWE-89
SQL Injection
CVE-2020-21120 2024-11-21 14:12 2023-02-16 Show GitHub Exploit DB Packet Storm