Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225661 5.5 警告 PulseCMS - Pulse CMS の delete.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0989 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
225662 6 警告 PulseCMS - Pulse CMS における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0988 2012-12-20 19:28 2010-03-26 Show GitHub Exploit DB Packet Storm
225663 6.8 警告 utilo - Rezervi の include/mail.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0983 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225664 7.5 危険 templateplazza - Joomla! 用の tpjobs コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0981 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225665 5 警告 pordus - PD PORTAL におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0977 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225666 7.5 危険 phpcityportal - PHPCityPortal の external.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-0975 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225667 7.5 危険 phpcityportal - PHPCityPortal における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0974 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225668 7.5 危険 scripteverkauf - phppool media Domain Verkaus および Auktions Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0973 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225669 4.3 警告 yuri d'elia - dl Download Ticket Service の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0963 2012-12-20 19:28 2010-03-16 Show GitHub Exploit DB Packet Storm
225670 6.8 警告 thomas perez - Tribisur の modules/hayoo/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0958 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198461 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5293 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198462 6.5 MEDIUM
Network 		prestashop prestashop "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5288 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198463 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5287 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198464 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5286 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198465 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5285 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198466 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ … CWE-863
 Incorrect Authorization 		CVE-2020-5279 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198467 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5278 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198468 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5276 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198469 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5272 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198470 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5271 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm