Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
257161 2.1 注意 オラクル - Oracle Database の Audit コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0854 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
257162 3.6 注意 オラクル - Oracle Database の Change Data Capture コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0870 2010-05-12 15:18 2010-04-13 Show GitHub Exploit DB Packet Storm
257163 4 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0851 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
257164 4 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0867 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
257165 5.5 警告 オラクル - Oracle Database の XML DB コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0852 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
257166 6.5 警告 オラクル - Oracle Database の JavaVM コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0866 2010-05-12 15:17 2010-04-13 Show GitHub Exploit DB Packet Storm
257167 7.1 危険 オラクル - Oracle Database の Core RDBMS コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0860 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
257168 7.5 危険 オラクル - 複数の Oracle 製品の Oracle Internet Directory コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0853 2010-05-12 15:16 2010-04-13 Show GitHub Exploit DB Packet Storm
257169 2.6 注意 シックス・アパート株式会社 - Movable Type におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1985 2010-05-12 12:01 2010-05-12 Show GitHub Exploit DB Packet Storm
257170 10 危険 日立 - 複数の EUR Form 製品 および EUR 製品における任意のコードが実行される脆弱性 CWE-noinfo
情報不足
- 2010-05-11 15:16 2010-03-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210721 5.4 MEDIUM
Network
phpgurukul hospital_management_system PHPGurukul Hospital Management System in PHP v4.0 has a Persistent Cross-Site Scripting vulnerability in \hms\admin\appointment-history.php. Remote registered users can exploit the vulnerability to o… CWE-79
Cross-site Scripting
CVE-2020-22167 2024-11-21 14:13 2021-06-23 Show GitHub Exploit DB Packet Storm
210722 7.5 HIGH
Network
phpgurukul hospital_management_system PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\forgot-password.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitiv… CWE-89
SQL Injection
CVE-2020-22166 2024-11-21 14:13 2021-06-23 Show GitHub Exploit DB Packet Storm
210723 7.5 HIGH
Network
phpgurukul hospital_management_system PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\user-login.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensitive inf… CWE-89
SQL Injection
CVE-2020-22165 2024-11-21 14:13 2021-06-23 Show GitHub Exploit DB Packet Storm
210724 7.5 HIGH
Network
phpgurukul hospital_management_system PHPGurukul Hospital Management System in PHP v4.0 has a SQL injection vulnerability in \hms\check_availability.php. Remote unauthenticated users can exploit the vulnerability to obtain database sensi… CWE-89
SQL Injection
CVE-2020-22164 2024-11-21 14:13 2021-06-23 Show GitHub Exploit DB Packet Storm
210725 8.8 HIGH
Network
akaunting akaunting Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file… CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-22390 2024-11-21 14:13 2021-06-22 Show GitHub Exploit DB Packet Storm
210726 9.8 CRITICAL
Network
74cms 74cms SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php. CWE-89
SQL Injection
CVE-2020-22212 2024-11-21 14:13 2021-06-17 Show GitHub Exploit DB Packet Storm
210727 9.8 CRITICAL
Network
74cms 74cms SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php. CWE-89
SQL Injection
CVE-2020-22211 2024-11-21 14:13 2021-06-17 Show GitHub Exploit DB Packet Storm
210728 9.8 CRITICAL
Network
74cms 74cms SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php. CWE-89
SQL Injection
CVE-2020-22210 2024-11-21 14:13 2021-06-17 Show GitHub Exploit DB Packet Storm
210729 9.8 CRITICAL
Network
74cms 74cms SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php. CWE-89
SQL Injection
CVE-2020-22209 2024-11-21 14:13 2021-06-17 Show GitHub Exploit DB Packet Storm
210730 9.8 CRITICAL
Network
74cms 74cms SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php. CWE-89
SQL Injection
CVE-2020-22208 2024-11-21 14:13 2021-06-17 Show GitHub Exploit DB Packet Storm