Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228271 6.8 警告 Uiga - Uiga Proxy の include/template.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-1528 2012-12-20 19:29 2010-04-26 Show GitHub Exploit DB Packet Storm
228272 7.5 危険 taskfreak - TaskFreak! Original マルチユーザの include/classes/tzn_user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1521 2012-12-20 19:29 2010-06-30 Show GitHub Exploit DB Packet Storm
228273 4.3 警告 taskfreak - TaskFreak! Original multi user の logout.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1520 2012-12-20 19:29 2010-06-30 Show GitHub Exploit DB Packet Storm
228274 9.3 危険 SWFTools - SWFTools における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2010-1516 2012-12-20 19:29 2010-08-17 Show GitHub Exploit DB Packet Storm
228275 2.6 注意 tomatocms - TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1515 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
228276 6 警告 tomatocms - TomatoCMS における任意の PHP コードを実行される脆弱性 CWE-Other
その他
CVE-2010-1514 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
228277 4.3 警告 tatsuhiro tsujikawa - aria2 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-1512 2012-12-20 19:29 2010-05-17 Show GitHub Exploit DB Packet Storm
228278 3.5 注意 PmWiki - PmWiki の table 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-1481 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
228279 7.5 危険 rockettheme - Joomla! 用の Rokmodule コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1480 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
228280 7.5 危険 rockettheme - Joomla! 用の Rokmodule コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-1479 2012-12-20 19:29 2010-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
226141 8.8 HIGH
Network
microsoft sharepoint_foundation A spoofing vulnerability exists in Microsoft SharePoint when it improperly handles requests to authorize applications, resulting in cross-site request forgery (CSRF).To exploit this vulnerability, an… CWE-352
 Origin Validation Error
CVE-2019-1259 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226142 8.8 HIGH
Network
microsoft sharepoint_foundation
sharepoint_enterprise_server
sharepoint_server
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln… CWE-20
 Improper Input Validation 
CVE-2019-1257 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226143 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is uniqu… NVD-CWE-noinfo
CVE-2019-1256 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226144 5.5 MEDIUM
Local
microsoft windows_server_2016
windows_10
windows_server_2019
An information disclosure vulnerability exists when Windows Hyper-V writes uninitialized memory to disk, aka 'Windows Hyper-V Information Disclosure Vulnerability'. CWE-908
 Use of Uninitialized Resource
CVE-2019-1254 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226145 7.8 HIGH
Local
microsoft windows_server_1803
windows_server_2019
windows_10_1809
windows_10_1703
windows_10_1709
windows_10_1803
windows_server_1903
windows_10_1903
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on th… NVD-CWE-noinfo
CVE-2019-1253 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226146 6.5 MEDIUM
Network
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_rt_8.1
windows_server_2019
windows_7
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is u… CWE-200
Information Exposure
CVE-2019-1252 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226147 5.5 MEDIUM
Local
microsoft windows_10
windows_server_2016
windows_server_2019
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE… CWE-200
Information Exposure
CVE-2019-1251 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226148 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u… NVD-CWE-noinfo
CVE-2019-1250 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226149 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_server_2019
windows_7
windows_rt_8.1
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u… NVD-CWE-noinfo
CVE-2019-1249 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm
226150 7.8 HIGH
Local
microsoft windows_server_2008
windows_server_2012
windows_10
windows_8.1
windows_server_2016
windows_7
windows_rt_8.1
windows_server_2019
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerability'. This CVE ID is u… NVD-CWE-noinfo
CVE-2019-1248 2024-11-21 13:36 2019-09-12 Show GitHub Exploit DB Packet Storm