Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225671 6.8 警告 saskia bruckner - Saskia's Shopsystem の content.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0957 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
225672 7.5 危険 PreProject.com - Pre Projects Pre E-Learning Portal の search_result.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-0954 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
225673 6.8 警告 phpcoin - phpCOIN の mod.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0953 2012-12-20 19:28 2010-03-10 Show GitHub Exploit DB Packet Storm
225674 5 警告 thorsten riess - Joomla! 用の JCollection コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-0944 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
225675 4.3 警告 web-site-development - eTek Systems Hit Counter におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0941 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
225676 4.3 警告 sanusart - Simple PHP Guestbook の guestbook.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0940 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
225677 5 警告 visialis - Visialis ABB Forum におけるデータベースをダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-0939 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
225678 4.3 警告 todoomasters - Todoo Forum の todooforum.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0938 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
225679 7.5 危険 visualizationlibrary - Visualization Library における脆弱性 CWE-noinfo
情報不足 		CVE-2010-0937 2012-12-20 19:28 2010-03-8 Show GitHub Exploit DB Packet Storm
225680 9.3 危険 Canonical - Ubuntu 上で稼動するベースファイルパッケージにおける任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2010-0834 2012-12-20 19:28 2010-08-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198461 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there are improper access controls on product page with combinations, attachments and specific prices. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5293 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198462 6.5 MEDIUM
Network 		prestashop prestashop "In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5288 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198463 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is improper access control on customers search. The problem is fixed in 1.7.6.5. CWE-863
 Incorrect Authorization 		CVE-2020-5287 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198464 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5286 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198465 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5285 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198466 6.5 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ … CWE-863
 Incorrect Authorization 		CVE-2020-5279 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198467 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.4.0 and 1.7.6.5, there is a reflected XSS on Exception page The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5278 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198468 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5276 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198469 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5272 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm
198470 6.1 MEDIUM
Network 		prestashop prestashop In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fixed in 1.7.6.5 CWE-79
Cross-site Scripting 		CVE-2020-5271 2024-11-21 14:33 2020-04-21 Show GitHub Exploit DB Packet Storm