Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228201 7.5 危険 shopex - ECShop の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2042 2012-12-20 19:29 2010-05-25 Show GitHub Exploit DB Packet Storm
228202 4.3 警告 php-calendar project - PHP-Calendar の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2041 2012-12-20 19:29 2010-05-25 Show GitHub Exploit DB Packet Storm
228203 4.3 警告 V-EVA - V-EVA Shopzilla Affiliate Script PHP の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2040 2012-12-20 19:29 2010-05-25 Show GitHub Exploit DB Packet Storm
228204 1.9 注意 wolfram research - Mathematica における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題
CVE-2010-2027 2012-12-20 19:29 2010-05-24 Show GitHub Exploit DB Packet Storm
228205 6.8 警告 sebrac.webcindario - MigasCMS の function.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2012 2012-12-20 19:29 2010-05-24 Show GitHub Exploit DB Packet Storm
228206 4.3 警告 proxy2 - Advanced Poll の misc/get_admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2003 2012-12-20 19:29 2010-05-20 Show GitHub Exploit DB Packet Storm
228207 2.1 注意 ron jerome - Drupal 用の Bibliography モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2000 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228208 2.1 注意 Saurused Ltd. - Saurus CMS の admin/edit.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1997 2012-12-20 19:29 2010-05-20 Show GitHub Exploit DB Packet Storm
228209 2.1 注意 tomatocms - TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1996 2012-12-20 19:29 2010-05-20 Show GitHub Exploit DB Packet Storm
228210 2.1 注意 tomatocms - TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1995 2012-12-20 19:29 2010-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
4091 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213rr.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized va… CWE-79
Cross-site Scripting
CVE-2026-48223 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4092 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… CWE-79
Cross-site Scripting
CVE-2026-48222 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4093 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205a.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized val… CWE-79
Cross-site Scripting
CVE-2026-48221 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4094 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… CWE-79
Cross-site Scripting
CVE-2026-48220 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4095 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics202.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… CWE-79
Cross-site Scripting
CVE-2026-48219 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4096 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in icons/buttons/landb.php that allows authenticated attackers to inject arbitrary JavaScript by passing an uns… CWE-79
Cross-site Scripting
CVE-2026-48218 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4097 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in delete_module.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitiz… CWE-79
Cross-site Scripting
CVE-2026-48217 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4098 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in db_loader.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized v… CWE-79
Cross-site Scripting
CVE-2026-48216 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4099 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in circle.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… CWE-79
Cross-site Scripting
CVE-2026-48215 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm
4100 5.4 MEDIUM
Network
- - Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in add_nm.php that allows authenticated attackers to inject arbitrary JavaScript by passing an unsanitized valu… CWE-79
Cross-site Scripting
CVE-2026-48214 2026-05-22 03:16 2026-05-22 Show GitHub Exploit DB Packet Storm