Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252951 4.3 警告 ut-files - UTStats の pages/match_report.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5007 2011-12-9 14:14 2011-11-2 Show GitHub Exploit DB Packet Storm
252952 7.5 危険 Denali - BrightSuite Groupware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5008 2011-12-9 14:13 2011-11-2 Show GitHub Exploit DB Packet Storm
252953 7.5 危険 ut-files - UTStats の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5009 2011-12-9 14:12 2011-11-2 Show GitHub Exploit DB Packet Storm
252954 4.3 警告 FullSite Pty Ltd - SchoolMation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5010 2011-12-9 14:10 2011-11-2 Show GitHub Exploit DB Packet Storm
252955 7.5 危険 FullSite Pty Ltd - SchoolMation における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5011 2011-12-9 14:10 2011-11-2 Show GitHub Exploit DB Packet Storm
252956 7.5 危険 David Noguera Gutierrez - DaLogin における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5012 2011-12-9 14:09 2011-11-2 Show GitHub Exploit DB Packet Storm
252957 7.5 危険 McKenzie Creations - Mckenzie Creations Virtual Real Estate Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5013 2011-12-9 14:04 2011-11-2 Show GitHub Exploit DB Packet Storm
252958 7.5 危険 ELITE　LADDAERS - Elite Gaming Ladders における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5014 2011-12-9 14:03 2011-11-2 Show GitHub Exploit DB Packet Storm
252959 7.5 危険 2daybiz - 2daybiz Network Community Script における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5015 2011-12-9 14:00 2011-11-2 Show GitHub Exploit DB Packet Storm
252960 7.5 危険 ELITE　LADDAERS - Elite Gaming Ladders における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5016 2011-12-9 14:00 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
246721 9.8 CRITICAL
Network 		tinyxml2_project tinyxml2 TinyXML2 6.2.0 has a heap-based buffer over-read in the XMLDocument::Parse function in libtinyxml2.so. NOTE: The tinyxml2 developers have determined that the reported overflow is due to improper use … CWE-125
Out-of-bounds Read 		CVE-2018-11210 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246722 7.2 HIGH
Network 		zblogcn z-blogphp An issue was discovered in Z-BlogPHP 2.0.0. zb_system/cmd.php?act=verify relies on MD5 for the password parameter, which might make it easier for attackers to bypass intended access restrictions via … CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2018-11209 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246723 4.8 MEDIUM
Network 		zblogcn z-blogphp An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright informat… CWE-79
Cross-site Scripting 		CVE-2018-11208 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246724 6.5 MEDIUM
Network 		hdfgroup hdf5 A division by zero was discovered in H5D__chunk_init in H5Dchunk.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. CWE-369
 Divide By Zero 		CVE-2018-11207 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246725 8.1 HIGH
Network 		hdfgroup hdf5 An out of bounds read was discovered in H5O_fill_new_decode and H5O_fill_old_decode in H5Ofill.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure at… CWE-125
Out-of-bounds Read 		CVE-2018-11206 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246726 8.1 HIGH
Network 		hdfgroup hdf5 A out of bounds read was discovered in H5VM_memcpyvv in H5VM.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service or information disclosure attack. CWE-125
Out-of-bounds Read 		CVE-2018-11205 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246727 6.5 MEDIUM
Network 		hdfgroup hdf5 A NULL pointer dereference was discovered in H5O__chunk_deserialize in H5Ocache.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. CWE-476
 NULL Pointer Dereference 		CVE-2018-11204 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246728 6.5 MEDIUM
Network 		hdfgroup hdf5 A division by zero was discovered in H5D__btree_decode_key in H5Dbtree.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. CWE-369
 Divide By Zero 		CVE-2018-11203 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246729 6.5 MEDIUM
Network 		hdfgroup hdf5 A NULL pointer dereference was discovered in H5S_hyper_make_spans in H5Shyper.c in the HDF HDF5 1.10.2 library. It could allow a remote denial of service attack. CWE-476
 NULL Pointer Dereference 		CVE-2018-11202 2024-11-21 12:42 2018-05-17 Show GitHub Exploit DB Packet Storm
246730 6.1 MEDIUM
Network 		livezilla livezilla chat/mobile/index.php in LiveZilla Live Chat 7.0.9.5 and prior is affected by Cross-Site Scripting via the Accept-Language HTTP header. CWE-79
Cross-site Scripting 		CVE-2018-10810 2024-11-21 12:42 2018-05-16 Show GitHub Exploit DB Packet Storm