Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228141 7.5 危険 robertotto - WoltLab Burning Board 用の Teamsite Hack プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1338 2012-12-20 19:29 2010-04-9 Show GitHub Exploit DB Packet Storm
228142 6 警告 PulseCMS - Pulse CMS における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2010-1334 2012-12-20 19:29 2010-04-9 Show GitHub Exploit DB Packet Storm
228143 6.8 警告 TYPO3 Association - TYPO3 の autoloader における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1153 2012-12-20 19:29 2010-04-20 Show GitHub Exploit DB Packet Storm
228144 6 警告 roshan singh - Open Direct Connect Hub におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1147 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
228145 7.5 危険 Tiki Software Community Association - TikiWiki CMS/Groupware の Standard Remember メソッドにおけるアクセスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1136 2012-12-20 19:29 2010-03-5 Show GitHub Exploit DB Packet Storm
228146 7.5 危険 Tiki Software Community Association - TikiWiki CMS/Groupware の user_logout 関数におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2010-1135 2012-12-20 19:29 2010-03-5 Show GitHub Exploit DB Packet Storm
228147 7.5 危険 Tiki Software Community Association - TikiWiki CMS/Groupware の searchlib.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1134 2012-12-20 19:29 2010-03-5 Show GitHub Exploit DB Packet Storm
228148 7.5 危険 Tiki Software Community Association - TikiWiki CMS/Groupware における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1133 2012-12-20 19:29 2010-03-5 Show GitHub Exploit DB Packet Storm
228149 4.3 警告 tristan barczyk - KloNews の cat.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1112 2012-12-20 19:29 2010-03-25 Show GitHub Exploit DB Packet Storm
228150 7.5 危険 ScriptsFeed.com - ScriptsFeed Dating Software の searchmatch.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1096 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194651 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. T… CWE-787
 Out-of-bounds Write 		CVE-2021-25178 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194652 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, pot… CWE-843
Type Confusion 		CVE-2021-25177 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194653 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash,… CWE-476
 NULL Pointer Dereference 		CVE-2021-25176 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194654 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, po… CWE-704
 Incorrect Type Conversion or Cast 		CVE-2021-25175 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194655 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potent… CWE-787
 Out-of-bounds Write 		CVE-2021-25174 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194656 7.8 HIGH
Local 		opendesign
siemens 		drawings_software_development_kit
jt2go
teamcenter_visualization
comos 		An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to c… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2021-25173 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194657 6.1 MEDIUM
Network 		opencats opencats OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues. CWE-79
Cross-site Scripting 		CVE-2021-25295 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194658 9.8 CRITICAL
Network 		opencats opencats OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:Activ… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-25294 2024-11-21 14:54 2021-01-18 Show GitHub Exploit DB Packet Storm
194659 6.1 MEDIUM
Network 		wpfastestcache wp_fastest_cache The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, wh… CWE-352
 Origin Validation Error 		CVE-2021-24870 2024-11-21 14:53 2024-01-17 Show GitHub Exploit DB Packet Storm
194660 8.8 HIGH
Network 		wpfastestcache wp_fastest_cache The WP Fastest Cache WordPress plugin before 0.9.5 does not escape user input in the set_urls_with_terms method before using it in a SQL statement, leading to an SQL injection exploitable by low priv… CWE-89
SQL Injection 		CVE-2021-24869 2024-11-21 14:53 2024-01-17 Show GitHub Exploit DB Packet Storm