Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228141 4.3 警告 pilotgroup - PG eLMS Pro の subscribe.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2356 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
228142 4.3 警告 pilotgroup - PG eLMS Pro の error.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-2355 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
228143 7.5 危険 pilotgroup - subscribe.php の PG eLMS Pro における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2354 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
228144 5 警告 Content Construction Kit project - Drupal 用の CCK モジュールにおけるタイトルを見つけられる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2353 2012-12-20 19:29 2010-06-16 Show GitHub Exploit DB Packet Storm
228145 5 警告 timhillone - H264WebCam におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2010-2349 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
228146 4.9 警告 SAP - SAP-JEECOR の Telnet インターフェースにおけるセキュリティチェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-2347 2012-12-20 19:29 2010-06-21 Show GitHub Exploit DB Packet Storm
228147 7.5 危険 subdreamer - Subdreamer CMS の admin/pages.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2339 2012-12-20 19:29 2010-06-18 Show GitHub Exploit DB Packet Storm
228148 7.5 危険 vunet - VU Web Visitor Analyst の redir.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-2338 2012-12-20 19:29 2010-06-18 Show GitHub Exploit DB Packet Storm
228149 6 警告 RSAセキュリティ - RSA Federated Identity Manager におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2337 2012-12-20 19:29 2010-07-28 Show GitHub Exploit DB Packet Storm
228150 5 警告 yamamah - Yamamah Photo Gallery の index.php における実行ファイルのソースコードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-2336 2012-12-20 19:29 2010-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194551 6.1 MEDIUM
Network 		ays-pro survey_maker Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered in Survey Maker WordPress plugin (versions <= 2.0.6). CWE-79
Cross-site Scripting 		CVE-2021-26256 2024-11-21 14:55 2022-02-22 Show GitHub Exploit DB Packet Storm
194552 9.8 CRITICAL
Network 		if-me ifme In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/n… - CVE-2021-25992 2024-11-21 14:55 2022-02-10 Show GitHub Exploit DB Packet Storm
194553 2.7 LOW
Network 		arangodb arangodb In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests pe… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-25939 2024-11-21 14:55 2022-02-9 Show GitHub Exploit DB Packet Storm
194554 6.1 MEDIUM
Network 		cacti cacti As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL paramete… CWE-79
Cross-site Scripting 		CVE-2021-26247 2024-11-21 14:55 2022-01-20 Show GitHub Exploit DB Packet Storm
194555 3.0 LOW
Network 		kubernetes kubernetes kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as… NVD-CWE-Other
CVE-2021-25743 2024-11-21 14:55 2022-01-7 Show GitHub Exploit DB Packet Storm
194556 8.8 HIGH
Network 		userfrosting userfrosting In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” f… CWE-74
Injection 		CVE-2021-25994 2024-11-21 14:55 2022-01-3 Show GitHub Exploit DB Packet Storm
194557 9.8 CRITICAL
Network 		talkyard talkyard In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the … CWE-613
 Insufficient Session Expiration 		CVE-2021-25981 2024-11-21 14:55 2022-01-3 Show GitHub Exploit DB Packet Storm
194558 5.4 MEDIUM
Network 		requarks wiki.js In Requarks wiki.js, versions 2.0.0-beta.147 to 2.5.255 are affected by Stored XSS vulnerability, where a low privileged (editor) user can upload a SVG file that contains malicious JavaScript while u… CWE-79
Cross-site Scripting 		CVE-2021-25993 2024-11-21 14:55 2021-12-30 Show GitHub Exploit DB Packet Storm
194559 7.3 HIGH
Network 		if-me ifme In Ifme, versions v5.0.0 to v7.32 are vulnerable against an improper access control, which makes it possible for admins to ban themselves leading to their deactivation from Ifme account and complete … NVD-CWE-Other
CVE-2021-25991 2024-11-21 14:55 2021-12-29 Show GitHub Exploit DB Packet Storm
194560 5.4 MEDIUM
Network 		if-me ifme In “ifme”, versions v7.22.0 to v7.31.4 are vulnerable against self-stored XSS in the contacts field as it allows loading XSS payloads fetched via an iframe. CWE-79
Cross-site Scripting 		CVE-2021-25990 2024-11-21 14:55 2021-12-29 Show GitHub Exploit DB Packet Storm