Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227861	5	警告	software.realtyna	-	Joomla! 用の Magic Updater コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1307	2012-12-20 19:29	2010-04-8	Show	GitHub Exploit DB Packet Storm

227862	7.5	危険	roberto aloi	-	Joomla! 用の Picasa コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1306	2012-12-20 19:29	2010-04-8	Show	GitHub Exploit DB Packet Storm

227863	7.5	危険	yamamah	-	Yamamah の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1300	2012-12-20 19:29	2010-04-7	Show	GitHub Exploit DB Packet Storm

227864	4	警告	PulseCMS	-	Pulse CMS の view.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-1298	2012-12-20 19:29	2010-04-6	Show	GitHub Exploit DB Packet Storm

227865	7.5	危険	Zabbix	-	Zabbix の API における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1277	2012-12-20 19:29	2010-04-6	Show	GitHub Exploit DB Packet Storm

227866	4.3	警告	webtoolkit	-	Emweb Wt におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1274	2012-12-20 19:29	2010-04-6	Show	GitHub Exploit DB Packet Storm

227867	7.5	危険	smart-plugs	-	smartplugs の showplugs.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1271	2012-12-20 19:29	2010-04-6	Show	GitHub Exploit DB Packet Storm

227868	7.5	危険	phpscripte24	-	Multi Auktions Komplett System の auktion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1270	2012-12-20 19:29	2010-04-6	Show	GitHub Exploit DB Packet Storm

227869	7.5	危険	phpscripte24	-	phpscripte24 Niedrig Gebote Pro Auktions System II の auktion.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-1269	2012-12-20 19:29	2010-04-6	Show	GitHub Exploit DB Packet Storm

227870	6.8	警告	stafford.uklinux	-	libESMTP の smtp-tls.c における信頼済み証明書を偽装される脆弱性	CWE-310 暗号の問題	CVE-2010-1194	2012-12-20 19:29	2010-03-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225551	8.8	HIGH Network	artica	pandora_fms	Pandora FMS 7.x suffers from remote code execution vulnerability. With an authenticated user who can modify the alert system, it is possible to define and execute commands as root/Administrator. NOTE…	CWE-863 Incorrect Authorization	CVE-2019-19681	2024-11-21 13:35	2019-12-27	Show	GitHub Exploit DB Packet Storm

225552	7.2	HIGH Network	halo	halo	Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-19999	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225553	7.5	HIGH Network	xiuno	xiunobbs	Xiuno BBS 4.0 allows XXE via plugin/xn_wechat_public/route/token.php.	CWE-611 XXE	CVE-2019-19998	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225554	5.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed unauthenticated file download with user information disclosure.	CWE-862 Missing Authorization	CVE-2019-19985	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225555	6.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed users with edit_post capabilities to manage plugin settings and email campaigns.	CWE-863 Incorrect Authorization	CVE-2019-19984	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225556	4.3	MEDIUM Network	fastvelocity	minify	In the WordPress plugin, Fast Velocity Minify before 2.7.7, the full web root path to the running WordPress application can be discovered. In order to exploit this vulnerability, FVM Debug Mode needs…	CWE-200 Information Exposure	CVE-2019-19983	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225557	5.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for unauthenticated option creation. In order to exploit this vulnerability, an attacker would need to send…	CWE-287 Improper Authentication	CVE-2019-19982	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225558	5.4	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings.	CWE-352 Origin Validation Error	CVE-2019-19981	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225559	4.3	MEDIUM Network	icegram	email_subscribers_\&_newsletters	The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a privilege bypass flaw that allowed authenticated users (Subscriber or greater access) to send test emails from the administra…	NVD-CWE-noinfo	CVE-2019-19980	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

225560	8.8	HIGH Network	wp_maintenance_project	wp_maintenance	A flaw in the WordPress plugin, WP Maintenance before 5.0.6, allowed attackers to enable a vulnerable site's maintenance mode and inject malicious code affecting site visitors. There was CSRF with re…	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2019-19979	2024-11-21 13:35	2019-12-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed