Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
230121 7.5 危険 tomatocms - TomatoCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1994 2012-12-20 19:29 2010-05-20 Show GitHub Exploit DB Packet Storm
230122 7.5 危険 redcomponent - Joomla! 用の redTWITTER コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1983 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
230123 7.5 危険 roberto aloi - Joomla! 用の Joomla Flickr コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1980 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
230124 2.1 注意 quicksketch - Drupal 用の FileField モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1958 2012-12-20 19:29 2010-06-17 Show GitHub Exploit DB Packet Storm
230125 7.5 危険 thefactory - Joomla! 用の Love Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1957 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
230126 7.5 危険 thefactory - Joomla! 用の Gadget Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1956 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
230127 7.5 危険 thefactory - Joomla! 用の Deluxe blogfactory コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1955 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
230128 10 危険 Standards Based Linux Instrumentation (SBLIM) - SBLIM SFCB の httpAdapter におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1937 2012-12-20 19:29 2010-05-14 Show GitHub Exploit DB Packet Storm
230129 9.3 危険 XnSoft - XnView におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-1932 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
230130 7.5 危険 rifat kurban - tekno.Portal の makale.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1925 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294351 - simplerisk simplerisk Cross-site request forgery (CSRF) vulnerability in management/prioritize_planning.php in SimpleRisk before 20130916-001 allows remote attackers to hijack the authentication of users for requests that… CWE-352
 Origin Validation Error
CVE-2013-5748 2024-11-21 10:58 2014-05-12 Show GitHub Exploit DB Packet Storm
294352 - hp network_node_manager_i Cross-site scripting (XSS) vulnerability in HP Network Node Manager i (NNMi) 9.0, 9.10, and 9.20 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6220 2024-11-21 10:58 2014-05-10 Show GitHub Exploit DB Packet Storm
294353 - bradesco_gateway_plugin_project bradesco_gateway Cross-site scripting (XSS) vulnerability in falha.php in the Bradesco Gateway plugin 2.0 for Wordpress, as used in the WP e-Commerce plugin, allows remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2013-5916 2024-11-21 10:58 2014-05-9 Show GitHub Exploit DB Packet Storm
294354 - uclouvain openjpeg OpenJPEG 1.5.1 allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. CWE-20
 Improper Input Validation 
CVE-2013-6053 2024-11-21 10:58 2014-04-28 Show GitHub Exploit DB Packet Storm
294355 - joomlaboat com_youtubegallery Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (com_youtubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting
CVE-2013-5956 2024-11-21 10:58 2014-04-25 Show GitHub Exploit DB Packet Storm
294356 - revive-adserver
openx
revive_adserver
openx
Multiple cross-site request forgery (CSRF) vulnerabilities in OpenX 2.8.11 and earlier allow remote attackers to hijack the authentication of administrators for requests that delete (1) users via adm… CWE-352
 Origin Validation Error
CVE-2013-5954 2024-11-21 10:58 2014-04-25 Show GitHub Exploit DB Packet Storm
294357 - t-mobile
asus
tm-ac1900
rt-ac68u_firmware
rt-ac68u
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary comm… CWE-78
OS Command 
CVE-2013-5948 2024-11-21 10:58 2014-04-22 Show GitHub Exploit DB Packet Storm
294358 - hp hp-ux_whitelisting Unspecified vulnerability in HP HP-UX Whitelisting (aka WLI) before A.01.02.02 on HP-UX B.11.31 allows local users to bypass intended access restrictions via unknown vectors. NVD-CWE-noinfo
CVE-2013-6219 2024-11-21 10:58 2014-04-20 Show GitHub Exploit DB Packet Storm
294359 - hp network_node_manager_i Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2013-6218 2024-11-21 10:58 2014-04-20 Show GitHub Exploit DB Packet Storm
294360 - hp universal_configuration_management_database Unspecified vulnerability in the Integration Service in HP Universal Configuration Management Database 10.01 and 10.10 allows remote authenticated users to execute arbitrary code via unknown vectors,… NVD-CWE-noinfo
CVE-2013-6215 2024-11-21 10:58 2014-04-20 Show GitHub Exploit DB Packet Storm