Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225861 7.5 危険 tim lochmueller & thomas buss - TYPO3 用の A21glossary Advanced Output エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4950 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225862 7.5 危険 q2solutions - Q2 Solutions ConnX の frmLoginPwdReminderPopup.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4947 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225863 6.8 警告 thetricky - Joomla! 用の Messaging コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4946 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225864 7.5 危険 zeuscart - Zeus Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4940 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225865 7.5 危険 warphd - Joomla! 用の JVideo! コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4938 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225866 4.3 警告 spirate - SPirate におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4937 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225867 7.5 危険 spirate - SPirate における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4936 2012-12-20 19:28 2010-07-22 Show GitHub Exploit DB Packet Storm
225868 7.5 危険 winterwebs - EZ Webitor の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4933 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
225869 4.3 警告 sungard - SunGard Banner Student System の twbkwbis.P_SecurityQuestion ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4930 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
225870 7.5 危険 sweetphp - TotalCalendar の admin/manage_users.php における任意のパスワードを変更される脆弱性 CWE-287
不適切な認証 		CVE-2009-4929 2012-12-20 19:28 2010-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212151 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10503 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212152 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10502 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212153 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10501 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212154 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10500 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212155 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to close any ticket, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10499 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212156 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10498 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212157 6.5 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10497 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212158 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10496 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212159 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10495 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm
212160 4.3 MEDIUM
Network 		chadhaajay phpkb CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request. CWE-352
 Origin Validation Error 		CVE-2020-10494 2024-11-21 13:55 2020-03-12 Show GitHub Exploit DB Packet Storm