|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 21, 2026, 2 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 242311 | 4.3 | 警告 | cactushop | - | CactuShop の _invoice.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-1486 | 2012-06-26 16:19 | 2010-04-22 | Show | GitHub Exploit DB Packet Storm |
| 242312 | 4.3 | 警告 | CMS Made Simple | - | CMS Made Simple (CMSMS) のバックエンドの admin/editprefs.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2010-1482 | 2012-06-26 16:19 | 2010-05-1 | Show | GitHub Exploit DB Packet Storm |
| 242313 | 6.8 | 警告 | alphaplug Joomla! |
- | Joomla! の alphauserpoints コンポーネントにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-1476 | 2012-06-26 16:19 | 2010-04-19 | Show | GitHub Exploit DB Packet Storm |
| 242314 | 7.5 | 危険 | B-Elektro Joomla! |
- | Joomla! の addressbook コンポーネントにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-1471 | 2012-06-26 16:19 | 2010-04-19 | Show | GitHub Exploit DB Packet Storm |
| 242315 | 7.5 | 危険 | dev.pucit.edu.pk Joomla! |
- | Joomla! 用の Web TV コンポーネントにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-1470 | 2012-06-26 16:19 | 2010-04-19 | Show | GitHub Exploit DB Packet Storm |
| 242316 | 7.5 | 危険 | Joomla! focusdev |
- | Joomla! の mv_restaurantmenumanager コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-1468 | 2012-06-26 16:19 | 2010-04-19 | Show | GitHub Exploit DB Packet Storm |
| 242317 | 7.5 | 危険 | francois raynaud | - | openUrgence Vaccin における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-1467 | 2012-06-26 16:19 | 2010-04-16 | Show | GitHub Exploit DB Packet Storm |
| 242318 | 6.8 | 警告 | francois raynaud | - | openUrgence Vaccin の scr/soustab.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-1466 | 2012-06-26 16:19 | 2010-04-16 | Show | GitHub Exploit DB Packet Storm |
| 242319 | 5 | 警告 | gogoritas Joomla! |
- | Joomla! 用の Photo Battle コンポーネントにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-1461 | 2012-06-26 16:19 | 2010-04-16 | Show | GitHub Exploit DB Packet Storm |
| 242320 | 4.9 | 警告 | GNUstep | - | GNUstep Base の gdomap の s/gdomap.c における任意のファイルを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2010-1457 | 2012-06-26 16:19 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 21, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 268771 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self XSS in the UI_confirm API (SEC-180). |
CWE-79
Cross-site Scripting |
CVE-2016-10781 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 268772 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows stored XSS in the ftp_sessions API (SEC-180). |
CWE-79
Cross-site Scripting |
CVE-2016-10780 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 268773 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows stored XSS in api1_listautoresponders (SEC-179). |
CWE-79
Cross-site Scripting |
CVE-2016-10779 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 268774 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self stored XSS in the listftpstable API (SEC-178). |
CWE-79
Cross-site Scripting |
CVE-2016-10778 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 268775 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self XSS in WHM Tweak Settings for autodiscover_host (SEC-177). |
CWE-79
Cross-site Scripting |
CVE-2016-10777 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 268776 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows stored XSS during the homedir removal phase of WHM Account termination (SEC-174). |
CWE-79
Cross-site Scripting |
CVE-2016-10776 | 2024-11-21 11:44 | 2019-08-6 | Show | GitHub Exploit DB Packet Storm |
| 268777 | 6.5 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows arbitrary file-chown operations via reassign_post_terminate_cruft (SEC-173). |
CWE-20
Improper Input Validation |
CVE-2016-10775 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 268778 | 5.4 |
MEDIUM
Network |
cpanel | cpanel | cPanel before 60.0.25 allows self XSS in the tail_ea4_migration.cgi interface (SEC-172). |
CWE-79
Cross-site Scripting |
CVE-2016-10774 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 268779 | 8.8 |
HIGH
Network |
cpanel | cpanel | cPanel before 60.0.25 allows format-string injection in exception-message handling (SEC-171). |
CWE-134
Use of Externally-Controlled Format String |
CVE-2016-10773 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |
| 268780 | 3.3 |
LOW
Local |
cpanel | cpanel | cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168). |
CWE-254
7PK - Security Features |
CVE-2016-10772 | 2024-11-21 11:44 | 2019-08-5 | Show | GitHub Exploit DB Packet Storm |