Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
132981 7.2 重要
Network 		シスコシステムズ RV130 VPN Router ファームウェア
Cisco RV110W Wireless-N VPN Firewall ファームウェア
Application Extension Platform
RV215W Wireless-N VPN Ro… 		複数の Cisco Small Business RV ルータにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2021-1160 2021-09-27 15:16 2021-01-13 Show GitHub Exploit DB Packet Storm
132982 7.2 重要
Network 		シスコシステムズ RV130 VPN Router ファームウェア
Cisco RV110W Wireless-N VPN Firewall ファームウェア
Application Extension Platform
RV215W Wireless-N VPN Ro… 		複数の Cisco Small Business RV ルータにおける境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2021-1159 2021-09-27 15:16 2021-01-13 Show GitHub Exploit DB Packet Storm
132983 7.2 重要
Network 		シスコシステムズ RV130 VPN Router ファームウェア
Cisco RV110W Wireless-N VPN Firewall ファームウェア
Application Extension Platform
RV215W Wireless-N VPN Ro… 		複数の Cisco Small Business RV ルータにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション 		CVE-2021-1146 2021-09-27 15:16 2021-01-13 Show GitHub Exploit DB Packet Storm
132984 5.4 警告
Network 		シスコシステムズ Cisco Enterprise Network Functions Virtualization Infrastructure Software (NFVIS) Cisco Enterprise NFV Infrastructure Software におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2021-1127 2021-09-27 15:16 2021-01-13 Show GitHub Exploit DB Packet Storm
132985 6.5 警告
Network 		シトリックス・システムズ Citrix Secure Mail Android 用 Citrix Secure Mail におけるコードインジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2020-8274 2021-09-24 18:05 2020-12-8 Show GitHub Exploit DB Packet Storm
132986 4.3 警告
Network 		シトリックス・システムズ Citrix Secure Mail Android 用 Citrix Secure Mail における権限管理に関する脆弱性 CWE-269
不適切な権限管理 		CVE-2020-8275 2021-09-24 18:03 2020-12-8 Show GitHub Exploit DB Packet Storm
132987 8.8 重要
Network 		Mozilla Foundation Mozilla Thunderbird
Mozilla Firefox
Mozilla Firefox ESR 		複数の Mozilla 製品における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み 		CVE-2020-26974 2021-09-24 17:49 2020-12-15 Show GitHub Exploit DB Packet Storm
132988 6.5 警告
Network 		Mozilla Foundation Mozilla Firefox Android 用 Firefox における脆弱性 CWE-noinfo
情報不足 		CVE-2020-26975 2021-09-24 17:44 2020-12-15 Show GitHub Exploit DB Packet Storm
132989 6.5 警告
Network 		Mozilla Foundation
Debian		 Mozilla Firefox
Debian GNU/Linux 		Firefox における脆弱性 CWE-noinfo
情報不足 		CVE-2020-26976 2021-09-24 17:22 2020-12-15 Show GitHub Exploit DB Packet Storm
132990 9.8 緊急
Network 		git-big-picture project git-big-picture git-big-picture における入力確認に関する脆弱性 CWE-20
不適切な入力確認 		CVE-2021-3028 2021-09-24 17:13 2021-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
306991 - zenphoto zenphoto SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtai… CWE-89
SQL Injection 		CVE-2010-4906 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306992 - softbizscripts article_directory_script SQL injection vulnerability in article_details.php in Softbiz Article Directory Script allows remote attackers to execute arbitrary SQL commands via the sbiz_id parameter. CWE-89
SQL Injection 		CVE-2010-4905 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306993 - simon_philips com_aardvertiser SQL injection vulnerability in the Aardvertiser (com_aardvertiser) component 2.1 and 2.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat_name parameter in a view a… CWE-89
SQL Injection 		CVE-2010-4904 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306994 - cubecart cubecart SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter. CWE-89
SQL Injection 		CVE-2010-4903 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306995 - joomla-clantools clantools Multiple SQL injection vulnerabilities in the Clantools (com_clantools) component 1.2.3 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) squad or (2) showgame paramete… CWE-89
SQL Injection 		CVE-2010-4902 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306996 - squiz mysource_matrix Multiple cross-site scripting (XSS) vulnerabilities in char_map.php in MySource Matrix 3.28.3 allow remote attackers to inject arbitrary web script or HTML via the (1) height or (2) width parameter. CWE-79
Cross-site Scripting 		CVE-2010-4901 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306997 - webmanager-pro cms_webmanager-pro Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. CWE-20
 Improper Input Validation  		CVE-2010-4900 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306998 - webmanager-pro cms_webmanager-pro SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2010-4899 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
306999 - gantry-framework com_gantry SQL injection vulnerability in the Gantry (com_gantry) component 3.0.10 for Joomla! allows remote attackers to execute arbitrary SQL commands via the moduleid parameter to index.php. CWE-89
SQL Injection 		CVE-2010-4898 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm
307000 - bluecms_project bluecms SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action. CWE-89
SQL Injection 		CVE-2010-4897 2024-11-21 10:22 2011-10-8 Show GitHub Exploit DB Packet Storm