Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227741	2.1	注意	Saurused Ltd.	-	Saurus CMS の admin/edit.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1997	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

227742	2.1	注意	tomatocms	-	TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1996	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

227743	2.1	注意	tomatocms	-	TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1995	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

227744	7.5	危険	tomatocms	-	TomatoCMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1994	2012-12-20 19:29	2010-05-20	Show	GitHub Exploit DB Packet Storm

227745	7.5	危険	redcomponent	-	Joomla! 用の redTWITTER コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1983	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

227746	7.5	危険	roberto aloi	-	Joomla! 用の Joomla Flickr コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1980	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

227747	2.1	注意	quicksketch	-	Drupal 用の FileField モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1958	2012-12-20 19:29	2010-06-17	Show	GitHub Exploit DB Packet Storm

227748	7.5	危険	thefactory	-	Joomla! 用の Love Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1957	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

227749	7.5	危険	thefactory	-	Joomla! 用の Gadget Factory コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1956	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

227750	7.5	危険	thefactory	-	Joomla! 用の Deluxe blogfactory コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1955	2012-12-20 19:29	2010-05-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
221051	6.1	MEDIUM Network	broadcom	automic_workload_automation	Insufficient output sanitization in the Automic Web Interface (AWI), in CA Automic Workload Automation 12.0 to 12.2, allow attackers to potentially conduct persistent cross site scripting (XSS) attac…	CWE-79 Cross-site Scripting	CVE-2019-6504	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221052	9.8	CRITICAL Network	advantech	webaccess\/scada	WebAccess/SCADA, Version 8.3. The software does not properly sanitize its inputs for SQL commands.	CWE-89 SQL Injection	CVE-2019-6523	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221053	8.6	HIGH Network	advantech	webaccess\/scada	WebAccess/SCADA, Version 8.3. Specially crafted requests could allow a possible authentication bypass that could allow an attacker to obtain and manipulate sensitive information.	CWE-287 Improper Authentication	CVE-2019-6521	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221054	9.8	CRITICAL Network	advantech	webaccess\/scada	WebAccess/SCADA, Version 8.3. An improper authentication vulnerability exists that could allow a possible authentication bypass allowing an attacker to upload malicious data.	CWE-287 Improper Authentication	CVE-2019-6519	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221055	5.9	MEDIUM Network	f5	big-ip_local_traffic_manager	On BIG-IP LTM 13.0.0 to 13.0.1 and 12.1.0 to 12.1.3.6, under certain conditions, the TMM may consume excessive resources when processing SSL Session ID Persistence traffic.	NVD-CWE-noinfo	CVE-2019-6590	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221056	7.5	HIGH Network	mitsubishielectric	q03udvcpu_firmware q04udvcpu_firmware q06udvcpu_firmware q13udvcpu_firmware q26udvcpu_firmware q04udpvcpu_firmware q06udpvcpu_firmware q13udpvcpu_firmware q26udpvcpu_firmware<…	Mitsubishi Electric Q03/04/06/13/26UDVCPU: serial number 20081 and prior, Q04/06/13/26UDPVCPU: serial number 20081 and prior, and Q03UDECPU, Q04/06/10/13/20/26/50/100UDEHCPU: serial number 20101 and …	CWE-400 Uncontrolled Resource Consumption	CVE-2019-6535	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221057	5.4	MEDIUM Network	f5	big-ip_access_policy_manager	On BIG-IP APM 14.0.0 to 14.0.0.4, 13.0.0 to 13.1.1.3 and 12.1.0 to 12.1.3.7, a reflected cross-site scripting (XSS) vulnerability exists in the resource information page for authenticated users when …	CWE-79 Cross-site Scripting	CVE-2019-6591	2024-11-21 13:46	2019-02-6	Show	GitHub Exploit DB Packet Storm

221058	9.8	CRITICAL Network	schedmd opensuse	slurm leap	SchedMD Slurm before 17.11.13 and 18.x before 18.08.5 mishandles 32-bit systems.	NVD-CWE-noinfo	CVE-2019-6438	2024-11-21 13:46	2019-01-31	Show	GitHub Exploit DB Packet Storm

221059	9.8	CRITICAL Network	calmar-webmedia	total_donations	Incorrect access control in migla_ajax_functions.php in the Calmar Webmedia Total Donations plugin through 2.0.5 for WordPress allows unauthenticated attackers to update arbitrary WordPress option va…	NVD-CWE-noinfo	CVE-2019-6703	2024-11-21 13:46	2019-01-27	Show	GitHub Exploit DB Packet Storm

221060	8.2	HIGH Network	golang debian opensuse	go debian_linux leap	Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recove…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2019-6486	2024-11-21 13:46	2019-01-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed