Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227411 7.5 危険 thefactory - Joomla! 用の Gadget Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1956 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
227412 7.5 危険 thefactory - Joomla! 用の Deluxe blogfactory コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1955 2012-12-20 19:29 2010-05-19 Show GitHub Exploit DB Packet Storm
227413 10 危険 Standards Based Linux Instrumentation (SBLIM) - SBLIM SFCB の httpAdapter におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1937 2012-12-20 19:29 2010-05-14 Show GitHub Exploit DB Packet Storm
227414 9.3 危険 XnSoft - XnView におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1932 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
227415 7.5 危険 rifat kurban - tekno.Portal の makale.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1925 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
227416 7.5 危険 phpscripte24 - Hi Web Wiesbaden Live Shopping Multi Portal System の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1924 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
227417 7.5 危険 phpscripte24 - Hi Web Wiesbaden Web Social Network Freunde Community System の user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1923 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
227418 7.5 危険 xinha
s9y		 - Serendipity で使用されている Xinha WYSIWYG エディタにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1916 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
227419 4.3 警告 tufat - FlashCard の cPlayer.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1872 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
227420 6.8 警告 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform で使用されている jboss-seam2 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1871 2012-12-20 19:29 2010-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
318231 7.5 HIGH
Network 		microsoft sql_server Microsoft SQL Server 6.0 through 2000, with SQL Authentication enabled, uses weak password encryption (XOR), which allows remote attackers to sniff and decrypt the password. CWE-326
Inadequate Encryption Strength 		CVE-2002-1872 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
318232 7.5 HIGH
Network 		click-2 ingenium_learning_management_system Click2Learn Ingenium Learning Management System 5.1 and 6.1 uses weak encryption for passwords (reversible algorithm), which allows attackers to obtain passwords. CWE-326
Inadequate Encryption Strength 		CVE-2002-1910 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
318233 5.5 MEDIUM
Local 		tata integrated_dialer Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme (one-to-one mapping) in a registry k… CWE-326
Inadequate Encryption Strength 		CVE-2002-1946 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
318234 5.5 MEDIUM
Local 		sharp zaurus_sl-5000d_firmware
zaurus_sl-5500_firmware 		Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via b… CWE-326
Inadequate Encryption Strength 		CVE-2002-1975 2024-02-15 00:50 2002-12-31 Show GitHub Exploit DB Packet Storm
318235 - blender
debian 		blender
debian_linux 		Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call. CWE-94
Code Injection 		CVE-2005-3302 2024-02-15 00:47 2005-10-24 Show GitHub Exploit DB Packet Storm
318236 - gggeek
debian 		phpxmlrpc
debian_linux 		Eval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote… CWE-94
Code Injection 		CVE-2005-2498 2024-02-15 00:47 2005-08-15 Show GitHub Exploit DB Packet Storm
318237 7.5 HIGH
Network 		juvare webeoc WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords. CWE-326
Inadequate Encryption Strength 		CVE-2005-2281 2024-02-15 00:47 2005-07-18 Show GitHub Exploit DB Packet Storm
318238 - php
gggeek
drupal
tiki
debian 		xml_rpc
phpxmlrpc
drupal
tikiwiki_cms\/groupware
debian_linux 		Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and PHPXMLRPC (aka XML-RPC For PHP or php-xmlrpc) 1.1 and earlier, as used in products such as (1) WordPress, (2… CWE-94
Code Injection 		CVE-2005-1921 2024-02-15 00:41 2005-07-5 Show GitHub Exploit DB Packet Storm
318239 - nrl.navy one-time_passwords_in_everything One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing random passphrases if the user account does not exist and st… CWE-203
 Information Exposure Through Discrepancy 		CVE-2001-1483 2024-02-15 00:17 2001-12-31 Show GitHub Exploit DB Packet Storm
318240 - amtote homebet AmTote International homebet program returns different error messages when invalid account numbers and PIN codes are provided, which allows remote attackers to determine the existence of valid accoun… CWE-203
 Information Exposure Through Discrepancy 		CVE-2001-1528 2024-02-15 00:17 2001-12-31 Show GitHub Exploit DB Packet Storm