Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240861	7.5	危険	Joomla! gohigheris	-	Joomla! 用の J!WHMCS integrator コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1977	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

240862	7.5	危険	cmstactics Joomla!	-	Joomla! の beeheard コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1952	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

240863	6.8	警告	60cycle	-	60cycleCMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1951	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

240864	6.8	警告	Joomla! emultisoft	-	Joomla! 用 Online News Paper Manager コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1950	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

240865	7.5	危険	Joomla! emultisoft	-	Joomla! 用 Online News Paper Manager コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1949	2012-06-26 16:19	2010-05-19	Show	GitHub Exploit DB Packet Storm

240866	4.3	警告	アップルマイクロソフト	-	Apple Safari における重要な情報を取得され脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-1940	2012-06-26 16:19	2010-05-14	Show	GitHub Exploit DB Packet Storm

240867	7.5	危険	CubeCart Limited	-	CubeCart PHP Shopping cart の includes/content/cart.inc.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1931	2012-06-26 16:19	2010-06-9	Show	GitHub Exploit DB Packet Storm

240868	7.5	危険	29o3 cms	-	29o3 CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-1922	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

240869	7.1	危険	DELL EMC (旧 EMC Corporation)	-	EMC Avamar におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-1919	2012-06-26 16:19	2010-05-28	Show	GitHub Exploit DB Packet Storm

240870	7.5	危険	eFront Learning	-	eFront の ask_chat.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1918	2012-06-26 16:19	2010-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286211	6.1	MEDIUM Network	exis-ti	exis_contexis	Cross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail acti…	CWE-79 Cross-site Scripting	CVE-2013-6239	2024-11-21 10:58	2019-11-23	Show	GitHub Exploit DB Packet Storm

286212	8.0	HIGH Network	eng	spagobi	Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, th…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-6234	2024-11-21 10:58	2019-11-23	Show	GitHub Exploit DB Packet Storm

286213	6.5	MEDIUM Network	horde debian	groupware debian_linux	Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.	CWE-352 Origin Validation Error	CVE-2013-6275	2024-11-21 10:58	2019-11-6	Show	GitHub Exploit DB Packet Storm

286214	7.8	HIGH Local	google	android	The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone call…	CWE-284 Improper Access Control	CVE-2013-6272	2024-11-21 10:58	2018-05-3	Show	GitHub Exploit DB Packet Storm

286215	7.8	HIGH Local	apt-listbugs_project debian	apt-listbugs debian_linux	apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors.	CWE-20 Improper Input Validation	CVE-2013-6049	2024-11-21 10:58	2017-10-21	Show	GitHub Exploit DB Packet Storm

286216	-		open-xchange	open-xchange_appsuite	The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id sharing scenarios, does not properly construct a SQL stateme…	CWE-200 Information Exposure	CVE-2013-6241	2024-11-21 10:58	2014-12-28	Show	GitHub Exploit DB Packet Storm

286217	-		pydio ajaxplorer	pydio ajaxplorer	Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to execute arbitrary code by u…	NVD-CWE-Other	CVE-2013-6227	2024-11-21 10:58	2014-12-28	Show	GitHub Exploit DB Packet Storm

286218	-		softaculous	webuzo	The login function in Softaculous Webuzo before 2.1.4 provides different error messages for invalid authentication attempts depending on whether the user account exists, which allows remote attackers…	CWE-200 Information Exposure	CVE-2013-6043	2024-11-21 10:58	2014-12-28	Show	GitHub Exploit DB Packet Storm

286219	-		softaculous	webuzo	index.php in Softaculous Webuzo before 2.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in a SOFTCookies sid cookie within a login action.	CWE-78 OS Command	CVE-2013-6041	2024-11-21 10:58	2014-12-28	Show	GitHub Exploit DB Packet Storm

286220	-		sensiolabs	symfony	The Security component in Symfony 2.0.x before 2.0.25, 2.1.x before 2.1.13, 2.2.x before 2.2.9, and 2.3.x before 2.3.6 allows remote attackers to cause a denial of service (CPU consumption) via a lon…	CWE-399 Resource Management Errors	CVE-2013-5958	2024-11-21 10:58	2014-12-28	Show	GitHub Exploit DB Packet Storm