Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227651	7.5	危険	TYPO3 Association	-	TYPO3 用の TT_Products エディタエクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0338	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227652	7.5	危険	TYPO3 Association	-	TYPO3 用の tt_news Mail alert エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0337	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227653	5	警告	TYPO3 Association	-	TYPO3 用の kiddog_mysqldumper エクステンションにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-0336	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227654	7.5	危険	stefan tannhaeuser	-	TYPO3 用の tv21_talkshow エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-0332	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227655	4.3	警告	stefan tannhaeuser	-	TYPO3 用の tv21_talkshow エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0331	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227656	4.3	警告	rastislav birka	-	TYPO3 用の cs2_unitconv エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0328	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227657	5	警告	sebastian baumann	-	TYPO3 用の SB Folderdownload エクステンションにおける重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-0325	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227658	4.3	警告	x10media	-	Glitter Central Script の submitlink.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0320	2012-12-20 19:28	2010-01-15	Show	GitHub Exploit DB Packet Storm

227659	5	警告	サン・マイクロシステムズ	-	Sun Java System Directory Server Enterprise Edition の ns-slapd におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0313	2012-12-20 19:28	2010-01-14	Show	GitHub Exploit DB Packet Storm

227660	6.8	警告	サン・マイクロシステムズ	-	Sun Java System Identity Manager における管理アクセス権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2010-0311	2012-12-20 19:28	2010-01-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225131	9.8	CRITICAL Network	inoideas	inoerp	download.php in inoERP 4.15 allows SQL injection through insecure deserialization.	CWE-89 CWE-502 SQL Injection Deserialization of Untrusted Data	CVE-2019-16894	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

225132	7.5	HIGH Network	netty debian canonical redhat	netty debian_linux ubuntu_linux jboss_enterprise_application_platform	Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling.	CWE-444 HTTP Request Smuggling	CVE-2019-16869	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

225133	9.8	CRITICAL Network	bmc	myit_digital_workplace	BMC Remedy ITSM Suite is prone to unspecified vulnerabilities in both DWP and SmartIT components, which can permit remote attackers to perform pre-authenticated remote commands execution on the Opera…	CWE-502 Deserialization of Untrusted Data	CVE-2019-16755	2024-11-21 13:31	2019-09-27	Show	GitHub Exploit DB Packet Storm

225134	5.3	MEDIUM Network	arm fedoraproject debian	mbed_crypto mbed_tls fedora debian_linux	Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private…	NVD-CWE-noinfo	CVE-2019-16910	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225135	5.4	MEDIUM Network	teampass	teampass	TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the ch…	CWE-79 Cross-site Scripting	CVE-2019-16904	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225136	5.3	MEDIUM Network	plutinosoft	platinum	Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead.	CWE-22 Path Traversal	CVE-2019-16903	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225137	5.3	MEDIUM Network	mediawiki fedoraproject debian	mediawiki fedora debian_linux	In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup.	CWE-862 Missing Authorization	CVE-2019-16738	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225138	7.5	HIGH Network	advantech	webaccess\/hmi_designer	Advantech WebAccess/HMI Designer 2.1.9.31 has Exception Handler Chain corruption starting at Unknown Symbol @ 0x0000000000000000 called from ntdll!RtlRaiseStatus+0x00000000000000b4.	CWE-755 Improper Handling of Exceptional Conditions	CVE-2019-16901	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225139	7.5	HIGH Network	advantech	webaccess\/hmi_designer	Advantech WebAccess/HMI Designer 2.1.9.31 has a User Mode Write AV starting at MSVCR90!memcpy+0x000000000000015c.	NVD-CWE-noinfo	CVE-2019-16900	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

225140	7.5	HIGH Network	advantech	webaccess\/hmi_designer	In Advantech WebAccess/HMI Designer 2.1.9.31, Data from a Faulting Address controls Code Flow starting at PM_V3!CTagInfoThreadBase::GetNICInfo+0x0000000000512918.	NVD-CWE-noinfo	CVE-2019-16899	2024-11-21 13:31	2019-09-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed