Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227811 6 警告 tomatocms - TomatoCMS における任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2010-1514 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
227812 4.3 警告 tatsuhiro tsujikawa - aria2 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1512 2012-12-20 19:29 2010-05-17 Show GitHub Exploit DB Packet Storm
227813 3.5 注意 PmWiki - PmWiki の table 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1481 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
227814 7.5 危険 rockettheme - Joomla! 用の Rokmodule コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1480 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227815 7.5 危険 rockettheme - Joomla! 用の Rokmodule コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1479 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
227816 6.8 警告 ternaria - Joomla! 用の Ternaria Informatica jfeedback! コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1478 2012-12-20 19:29 2010-04-19 Show GitHub Exploit DB Packet Storm
227817 6.8 警告 ternaria - Joomla! 用の Preventive & Reservation コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1475 2012-12-20 19:29 2010-04-19 Show GitHub Exploit DB Packet Storm
227818 6.8 警告 supachai teasakul - Joomla! 用の Sweety Keeper コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1474 2012-12-20 19:29 2010-04-19 Show GitHub Exploit DB Packet Storm
227819 6.8 警告 ternaria - Joomla! 用の Ternaria Informatica JProject Manager コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1469 2012-12-20 19:29 2010-04-19 Show GitHub Exploit DB Packet Storm
227820 9.3 危険 trellian - Trellian FTP クライアントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1465 2012-12-20 19:29 2010-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220881 7.5 HIGH
Network 		lenovo
ibm 		flex_system_x240_m4_firmware
flex_system_x240_m5_firmware
flex_system_x280_x6_firmware
flex_system_x440_m4_firmware
flex_system_x480_x6_firmware
flex_system_x880_firmware
nextscale_… 		In various firmware versions of Lenovo System x, the integrated management module II (IMM2)'s first failure data capture (FFDC) includes the web server's private key in the generated log file for sup… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2019-6157 2024-11-21 13:46 2019-04-23 Show GitHub Exploit DB Packet Storm
220882 8.8 HIGH
Network 		siemens sinema_remote_connect_server A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Due to insufficient checking of user permissions, an attacker may access URLs that require special authoriza… - CVE-2019-6570 2024-11-21 13:46 2019-04-17 Show GitHub Exploit DB Packet Storm
220883 9.8 CRITICAL
Network 		siemens spectrum_power_4 A vulnerability has been identified in Spectrum Power 4 (with Web Office Portal). An attacker with network access to the web server on port 80/TCP or 443/TCP could execute system commands with admini… NVD-CWE-noinfo
CVE-2019-6579 2024-11-21 13:46 2019-04-17 Show GitHub Exploit DB Packet Storm
220884 7.5 HIGH
Network 		siemens simatic_cp443-1_opc_ua_firmware
simatic_et_200_open_controller_cpu_1515sp_pc2_firmware
simatic_ipc_diagmonitor_firmware
simatic_net_pc_software_firmware
simatic_rf188c_firmware
simatic… 		A vulnerability has been identified in SIMATIC CP 443-1 OPC UA (All versions), SIMATIC ET 200SP Open Controller CPU 1515SP PC2 (incl. SIPLUS variants) (All versions < V2.7), SIMATIC HMI Comfort Outdo… - CVE-2019-6575 2024-11-21 13:46 2019-04-17 Show GitHub Exploit DB Packet Storm
220885 7.5 HIGH
Network 		siemens cp1604_firmware
cp1616_firmware
simatic_rf185c_firmware
simatic_cp343-1_advanced_firmware
simatic_cp443-1_firmware
simatic_cp443-1_advanced_firmware
simatic_et_200_sp_open_controlle… 		The webserver of the affected devices contains a vulnerability that may lead to a denial of service condition. An attacker may cause a denial of service situation which leads to a restart of the we… - CVE-2019-6568 2024-11-21 13:46 2019-04-17 Show GitHub Exploit DB Packet Storm
220886 9.8 CRITICAL
Network 		f5 big-ip_local_traffic_manager
big-ip_application_acceleration_manager
big-ip_advanced_firewall_manager
big-ip_analytics
big-ip_access_policy_manager
big-ip_application_security_manager<… 		Platform dependent weakness. This issue only impacts iSeries platforms. On these platforms, in BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, FPS, GTM, Link Controller, PEM, WebAccele… CWE-522
 Insufficiently Protected Credentials 		CVE-2019-6609 2024-11-21 13:46 2019-04-16 Show GitHub Exploit DB Packet Storm
220887 9.8 CRITICAL
Network 		moxa iks-g6824a_firmware
eds-405a_firmware
eds-408a_firmware
eds-510a_firmware 		Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of se… CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2019-6526 2024-11-21 13:46 2019-04-15 Show GitHub Exploit DB Packet Storm
220888 7.8 HIGH
Local 		gemalto sentinel_ultrapro_client_library The uncontrolled search path element vulnerability in Gemalto Sentinel UltraPro Client Library ux32w.dll Versions 1.3.0, 1.3.1, and 1.3.2 enables an attacker to load and execute a malicious file. CWE-427
 Uncontrolled Search Path Element 		CVE-2019-6534 2024-11-21 13:46 2019-04-12 Show GitHub Exploit DB Packet Storm
220889 8.8 HIGH
Network 		aveva wonderware_system_platform AVEVA Wonderware System Platform 2017 Update 2 and prior uses an ArchestrA network user account for authentication of system processes and inter-node communications. A user with low privileges could … CWE-269
 Improper Privilege Management 		CVE-2019-6525 2024-11-21 13:46 2019-04-12 Show GitHub Exploit DB Packet Storm
220890 5.5 MEDIUM
Local 		iobit smart_defrag SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user defined bytes and size when IOCTL 0x9C401CC0 is called. This kernel pointer can b… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2019-6493 2024-11-21 13:46 2019-04-12 Show GitHub Exploit DB Packet Storm