Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250891 7.5 危険 accimoveis - DescargarVista ACC Imoveis における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4273 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250892 7.5 危険 pulseinfotech
Joomla!		 - Joomla! 用の Pulse Infotech Sponsor Wall コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4272 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250893 7.5 危険 ImpressCMS - ImpressCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4271 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250894 5 警告 Netshine Software - nBill (com_netinvoice) コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4270 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250895 7.5 危険 Open Dynamics - Collabtive の managechat.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4269 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250896 7.5 危険 pulseinfotech
Joomla!		 - Joomla! 用の Pulse Infotech Flip Wall コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4268 2012-03-27 18:42 2010-11-16 Show GitHub Exploit DB Packet Storm
250897 2.6 注意 レッドハット - Red Hat JBoss Enterprise Application Platform の JBoss Remoting におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2010-4265 2012-03-27 18:42 2010-12-8 Show GitHub Exploit DB Packet Storm
250898 6.8 警告 Xfig project - Xfig におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4262 2012-03-27 18:42 2010-12-17 Show GitHub Exploit DB Packet Storm
250899 6.8 警告 FontForge project - FontForge におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4259 2012-03-27 18:42 2010-12-7 Show GitHub Exploit DB Packet Storm
250900 6 警告 WordPress.org - WordPress の do_trackbacks 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4257 2012-03-27 18:42 2010-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273271 7.5 HIGH
Network 		qt
fedoraproject 		qt
fedora 		Qt through 5.14 allows an exponential XML entity expansion attack via a crafted SVG document that is mishandled in QXmlStreamReader, a related issue to CVE-2003-1564. CWE-776
XML Entity Expansion 		CVE-2015-9541 2024-11-21 11:40 2020-01-25 Show GitHub Exploit DB Packet Storm
273272 6.1 MEDIUM
Network 		chamilo chamilo_lms Chamilo LMS through 1.9.10.2 allows a link_goto.php?link_url= open redirect, a related issue to CVE-2015-5503. CWE-601
Open Redirect 		CVE-2015-9540 2024-11-21 11:40 2020-01-4 Show GitHub Exploit DB Packet Storm
273273 6.1 MEDIUM
Network 		fast_secure_contact_form_project fast_secure_contact_form The Fast Secure Contact Form plugin before 4.0.38 for WordPress allows fs_contact_form1[welcome] XSS. CWE-79
Cross-site Scripting 		CVE-2015-9539 2024-11-21 11:40 2019-11-27 Show GitHub Exploit DB Packet Storm
273274 6.5 MEDIUM
Network 		imagely nextgen_gallery The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection. CWE-22
Path Traversal 		CVE-2015-9538 2024-11-21 11:40 2019-11-27 Show GitHub Exploit DB Packet Storm
273275 5.4 MEDIUM
Network 		imagely nextgen_gallery The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnail_width, thumbnail_height, thumbwidth, thumbheight, wmXpos, and wmYpos, and template. CWE-79
Cross-site Scripting 		CVE-2015-9537 2024-11-21 11:40 2019-11-27 Show GitHub Exploit DB Packet Storm
273276 6.1 MEDIUM
Network 		sandhillsdev
easydigitaldownloads 		easy_digital_downloads
recount_earnings 		The Easy Digital Downloads (EDD) Recount Earnings extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2… CWE-79
Cross-site Scripting 		CVE-2015-9524 2024-11-21 11:40 2019-10-24 Show GitHub Exploit DB Packet Storm
273277 6.1 MEDIUM
Network 		sandhillsdev
easydigitaldownloads 		easy_digital_downloads
recommended_products 		The Easy Digital Downloads (EDD) Recommended Products extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, a… CWE-79
Cross-site Scripting 		CVE-2015-9523 2024-11-21 11:40 2019-10-24 Show GitHub Exploit DB Packet Storm
273278 6.1 MEDIUM
Network 		sandhillsdev
easydigitaldownloads 		easy_digital_downloads
qr_code 		The Easy Digital Downloads (EDD) QR Code extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and 2.3.x befo… CWE-79
Cross-site Scripting 		CVE-2015-9522 2024-11-21 11:40 2019-10-24 Show GitHub Exploit DB Packet Storm
273279 6.1 MEDIUM
Network 		sandhillsdev
easydigitaldownloads 		easy_digital_downloads
pushover_notifications 		The Easy Digital Downloads (EDD) Pushover Notifications extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9,… CWE-79
Cross-site Scripting 		CVE-2015-9521 2024-11-21 11:40 2019-10-24 Show GitHub Exploit DB Packet Storm
273280 6.1 MEDIUM
Network 		sandhillsdev
easydigitaldownloads 		easy_digital_downloads
per_product_emails 		The Easy Digital Downloads (EDD) Per Product Emails extension for WordPress, as used with EDD 1.8.x before 1.8.7, 1.9.x before 1.9.10, 2.0.x before 2.0.5, 2.1.x before 2.1.11, 2.2.x before 2.2.9, and… CWE-79
Cross-site Scripting 		CVE-2015-9520 2024-11-21 11:40 2019-10-24 Show GitHub Exploit DB Packet Storm