Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254021	7.5	危険	DrBenHur	-	DBHcms の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4869	2012-02-9 11:10	2011-10-5	Show	GitHub Exploit DB Packet Storm

254022	4.3	警告	W-Agora	-	W-Agora の search.php3 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4868	2012-02-9 11:10	2011-10-5	Show	GitHub Exploit DB Packet Storm

254023	7.5	危険	W-Agora	-	W-Agora の search.php3 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4867	2012-02-9 11:10	2011-10-5	Show	GitHub Exploit DB Packet Storm

254024	7.5	危険	Chipmunk Scripts	-	Chipmunk Board の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4866	2012-02-9 11:09	2011-10-5	Show	GitHub Exploit DB Packet Storm

254025	7.5	危険	Jextensions	-	Joomla! 用 JE Guestbook (com_jeguestbook) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4865	2012-02-9 11:08	2011-10-5	Show	GitHub Exploit DB Packet Storm

254026	7.5	危険	Daniel James Scott	-	Joomla! 用 Club Manager (com_clubmanager) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4864	2012-02-9 11:08	2011-10-5	Show	GitHub Exploit DB Packet Storm

254027	4.3	警告	The GetSimple Team	-	GetSimple CMS の admin/changedata.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4863	2012-02-9 11:07	2011-10-5	Show	GitHub Exploit DB Packet Storm

254028	7.5	危険	Joomla! Jextensions	-	Joomla! 用 JExtensions JE Director コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4862	2012-02-9 11:07	2011-10-5	Show	GitHub Exploit DB Packet Storm

254029	7.5	危険	webSPELL	-	webSPELL の asearch.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4861	2012-02-9 11:06	2011-10-5	Show	GitHub Exploit DB Packet Storm

254030	7.5	危険	Galaxyscriptz	-	MyPhpAuction の product_desc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4860	2012-02-9 11:05	2011-10-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
215931	6.5	MEDIUM Network	cpan\	\	The CPAN::Checksums package 2.12 for Perl does not uniquely define signed data.	NVD-CWE-noinfo	CVE-2020-16155	2024-11-21 14:06	2021-12-14	Show	GitHub Exploit DB Packet Storm

215932	7.8	HIGH Local	app\ fedoraproject	\ fedora	The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.	CWE-347 Improper Verification of Cryptographic Signature	CVE-2020-16154	2024-11-21 14:06	2021-12-14	Show	GitHub Exploit DB Packet Storm

215933	9.8	CRITICAL Network	extremenetworks	aerohive_netconfig	The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP reque…	CWE-829 Inclusion of Functionality from Untrusted Control Sphere	CVE-2020-16152	2024-11-21 14:06	2021-11-15	Show	GitHub Exploit DB Packet Storm

215934	6.5	MEDIUM Network	google	angle	Out of bounds read in ANGLE allowed a remote attacker to obtain sensitive data via a crafted HTML page.	CWE-125 Out-of-bounds Read	CVE-2020-16048	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

215935	4.3	MEDIUM Network	fortinet	fortiadc	A cleartext storage of sensitive information in GUI in FortiADC versions 5.4.3 and below, 6.0.0 and below may allow a remote authenticated attacker to retrieve some sensitive information such as user…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-15935	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

215936	5.4	MEDIUM Network	fortinet	forticlient_enterprise_management_server	An improper neutralization of input vulnerability [CWE-79] in FortiClientEMS versions 6.4.1 and below and 6.2.9 and below may allow a remote authenticated attacker to inject malicious script/tags via…	CWE-79 Cross-site Scripting	CVE-2020-15940	2024-11-21 14:06	2021-11-3	Show	GitHub Exploit DB Packet Storm

215937	5.4	MEDIUM Network	fortinet	forticlient_endpoint_management_server	A path traversal vulnerability [CWE-22] in FortiClientEMS versions 6.4.1 and below; 6.2.8 and below may allow an authenticated attacker to inject directory traversal character sequences to add/delete…	CWE-22 Path Traversal	CVE-2020-15941	2024-11-21 14:06	2021-10-6	Show	GitHub Exploit DB Packet Storm

215938	4.3	MEDIUM Network	fortinet	fortisandbox	An improper access control vulnerability (CWE-284) in FortiSandbox versions 3.2.1 and below and 3.1.4 and below may allow an authenticated, unprivileged attacker to download the device configuration …	NVD-CWE-Other	CVE-2020-15939	2024-11-21 14:06	2021-09-7	Show	GitHub Exploit DB Packet Storm

215939	9.8	CRITICAL Network	govicture	pc420_firmware	Stack-based Buffer Overflow vulnerability in the ONVIF server component of Victure PC420 smart camera allows an attacker to execute remote code on the target device. This issue affects: Victure PC420…	CWE-787 Out-of-bounds Write	CVE-2020-15744	2024-11-21 14:06	2021-08-30	Show	GitHub Exploit DB Packet Storm

215940	5.9	MEDIUM Network	fehcom	s\/qmail	In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client and s/qmail. This allows e-mail messages and user credential…	CWE-77 Command Injection	CVE-2020-15955	2024-11-21 14:06	2021-08-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed