Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250821	5	警告	The phpMyAdmin Project	-	phpMyAdmin における認証を回避する脆弱性	CWE-287 不適切な認証	CVE-2010-4481	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

250822	4.3	警告	The phpMyAdmin Project	-	PhpMyAdmin の error.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4480	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

250823	4.3	警告	Electric Sheep Fencing	-	pfSense におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4412	2012-03-27 18:42	2010-12-7	Show	GitHub Exploit DB Packet Storm

250824	4.3	警告	alberto pittoni	-	AlGuest におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4407	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250825	6.8	警告	brunetton	-	Brunetton LittlePhpGallery の gallery.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4406	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250826	4.3	警告	anything-digital	-	Joomla! の Yannick Gaultier コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4405	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250827	7.5	危険	anything-digital	-	Joomla! の Yannick Gaultier コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4404	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250828	5	警告	devbits	-	WordPress の Register Plus プラグインにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4403	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250829	4.3	警告	devbits	-	WordPress の wp-login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4402	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

250830	5	警告	dynpg	-	DynPG CMS の languages.inc.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4401	2012-03-27 18:42	2010-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294661	9.1	CRITICAL Network	telecomsoftware	samwin_contact_center samwin_agent	A vulnerability was found in Telecommunication Software SAMwin Contact Center Suite 5.1. It has been rated as critical. Affected by this issue is the function getCurrentDBVersion in the library SAMwi…	CWE-798 Use of Hard-coded Credentials	CVE-2013-10002	2024-11-21 10:48	2022-05-25	Show	GitHub Exploit DB Packet Storm

294662	5.9	MEDIUM Network	htc	mail	A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the publi…	CWE-295 Improper Certificate Validation	CVE-2013-10001	2024-11-21 10:48	2022-05-17	Show	GitHub Exploit DB Packet Storm

294663	6.5	MEDIUM Network	canonical	unity-firefox-extension ubuntu_linux	The unity-firefox-extension package could be tricked into destroying the Unity webapps context, causing Firefox to crash. This could be achieved by spinning the event loop inside the webapps initiali…	CWE-404 Improper Resource Shutdown or Release	CVE-2013-1054	2024-11-21 10:48	2021-04-8	Show	GitHub Exploit DB Packet Storm

294664	4.3	MEDIUM Network	canonical	unity-firefox-extension ubuntu_linux	The unity-firefox-extension package could be tricked into dropping a C callback which was still in use, which Firefox would then free, causing Firefox to crash. This could be achieved by adding an ac…	CWE-404 Improper Resource Shutdown or Release	CVE-2013-1055	2024-11-21 10:48	2021-04-8	Show	GitHub Exploit DB Packet Storm

294665	5.5	MEDIUM Local	canonical	remote-login-service	In crypt.c of remote-login-service, the cryptographic algorithm used to cache usernames and passwords is insecure. An attacker could use this vulnerability to recover usernames and passwords from the…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2013-1053	2024-11-21 10:48	2021-01-14	Show	GitHub Exploit DB Packet Storm

294666	9.8	CRITICAL Network	polarbear_cms_project	polarbear_cms	A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-0803	2024-11-21 10:48	2020-02-12	Show	GitHub Exploit DB Packet Storm

294667	6.1	MEDIUM Network	chamilo	chamilo	Chamilo 1.9.4 has XSS due to improper validation of user-supplied input by the chat.php script.	CWE-79 Cross-site Scripting	CVE-2013-0739	2024-11-21 10:48	2020-01-30	Show	GitHub Exploit DB Packet Storm

294668	6.1	MEDIUM Network	chamilo	chamilo	Chamilo 1.9.4 has Multiple XSS and HTML Injection Vulnerabilities: blog.php and announcements.php.	CWE-79 Cross-site Scripting	CVE-2013-0738	2024-11-21 10:48	2020-01-30	Show	GitHub Exploit DB Packet Storm

294669	7.8	HIGH Local	hexagongeospatial	erdas_er_viewer	ERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities	CWE-427 Uncontrolled Search Path Element	CVE-2013-0725	2024-11-21 10:48	2020-01-30	Show	GitHub Exploit DB Packet Storm

294670	6.1	MEDIUM Network	boltwire	boltwire	Cross-site scripting (XSS) vulnerability in BoltWire 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the fieldnames parameter.	CWE-79 Cross-site Scripting	CVE-2013-0737	2024-11-21 10:48	2020-01-3	Show	GitHub Exploit DB Packet Storm