Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227811	4.3	警告	taskfreak	-	TaskFreak! Original multi user の logout.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1520	2012-12-20 19:29	2010-06-30	Show	GitHub Exploit DB Packet Storm

227812	9.3	危険	SWFTools	-	SWFTools における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1516	2012-12-20 19:29	2010-08-17	Show	GitHub Exploit DB Packet Storm

227813	2.6	注意	tomatocms	-	TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1515	2012-12-20 19:29	2010-06-15	Show	GitHub Exploit DB Packet Storm

227814	6	警告	tomatocms	-	TomatoCMS における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2010-1514	2012-12-20 19:29	2010-06-15	Show	GitHub Exploit DB Packet Storm

227815	4.3	警告	tatsuhiro tsujikawa	-	aria2 におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1512	2012-12-20 19:29	2010-05-17	Show	GitHub Exploit DB Packet Storm

227816	3.5	注意	PmWiki	-	PmWiki の table 機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1481	2012-12-20 19:29	2010-05-12	Show	GitHub Exploit DB Packet Storm

227817	7.5	危険	rockettheme	-	Joomla! 用の Rokmodule コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1480	2012-12-20 19:29	2010-04-13	Show	GitHub Exploit DB Packet Storm

227818	7.5	危険	rockettheme	-	Joomla! 用の Rokmodule コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1479	2012-12-20 19:29	2010-04-13	Show	GitHub Exploit DB Packet Storm

227819	6.8	警告	ternaria	-	Joomla! 用の Ternaria Informatica jfeedback! コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1478	2012-12-20 19:29	2010-04-19	Show	GitHub Exploit DB Packet Storm

227820	6.8	警告	ternaria	-	Joomla! 用の Preventive & Reservation コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1475	2012-12-20 19:29	2010-04-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220711	6.1	MEDIUM Network	axiositalia	registro_elettronico	Axios Italia Axios RE 1.7.0/7.0.0 devices have XSS via the RELogOff.aspx Error_Parameters parameter. In some situations, the XSS would be on the family.axioscloud.it cloud service; however, the vendo…	CWE-79 Cross-site Scripting	CVE-2019-7693	2024-11-21 13:48	2019-02-11	Show	GitHub Exploit DB Packet Storm

220712	9.8	CRITICAL Network	cim_project	cim	install/install.php in CIM 0.9.3 allows remote attackers to execute arbitrary PHP code via a crafted prefix value because of configuration file mishandling in the N=83 case, as demonstrated by a call…	CWE-94 Code Injection	CVE-2019-7692	2024-11-21 13:48	2019-02-11	Show	GitHub Exploit DB Packet Storm

220713	9.8	CRITICAL Network	inxedu	inxedu	inxedu through 2018-12-24 has a vulnerability that can lead to the upload of a malicious JSP file. The vulnerable code location is com.inxedu.os.common.controller.VideoUploadController#gok4 (com/inxe…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-7684	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220714	9.8	CRITICAL Network	enphase	envoy	A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888.	CWE-22 Path Traversal	CVE-2019-7678	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220715	6.1	MEDIUM Network	enphase	envoy	XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888.	CWE-79 Cross-site Scripting	CVE-2019-7677	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220716	7.2	HIGH Network	enphase	envoy	A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account.	CWE-521 Weak Password Requirements	CVE-2019-7676	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220717	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. The default management application is delivered over cleartext HTTP with Basic Authentication, as demonstrated by the /admin/index.html UR…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2019-7675	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220718	9.8	CRITICAL Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. /admin/access accepts a request to set the "aaaaa" password, considered insecure for some use cases, from a user.	CWE-521 Weak Password Requirements	CVE-2019-7674	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220719	7.5	HIGH Network	mobotix	s14_firmware	An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices. Administrator Credentials are stored in the 13-character DES hash format.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-7673	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

220720	5.5	MEDIUM Local	elfutils_project debian canonical opensuse redhat	elfutils debian_linux ubuntu_linux leap enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_eus enterprise_linux_server_tus enter…	In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32_xlatetom in elf32_xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of s…	CWE-125 Out-of-bounds Read	CVE-2019-7665	2024-11-21 13:48	2019-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed