Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228271 7.5 危険 redcomponent - Joomla! 用の redSHOP コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1531 2012-12-20 19:29 2010-04-26 Show GitHub Exploit DB Packet Storm
228272 2.1 注意 reyero - Drupal 用の Internationalization モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1530 2012-12-20 19:29 2010-04-7 Show GitHub Exploit DB Packet Storm
228273 6.8 警告 Uiga - Uiga Proxy の include/template.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1528 2012-12-20 19:29 2010-04-26 Show GitHub Exploit DB Packet Storm
228274 7.5 危険 taskfreak - TaskFreak! Original マルチユーザの include/classes/tzn_user.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1521 2012-12-20 19:29 2010-06-30 Show GitHub Exploit DB Packet Storm
228275 4.3 警告 taskfreak - TaskFreak! Original multi user の logout.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1520 2012-12-20 19:29 2010-06-30 Show GitHub Exploit DB Packet Storm
228276 9.3 危険 SWFTools - SWFTools における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-1516 2012-12-20 19:29 2010-08-17 Show GitHub Exploit DB Packet Storm
228277 2.6 注意 tomatocms - TomatoCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1515 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
228278 6 警告 tomatocms - TomatoCMS における任意の PHP コードを実行される脆弱性 CWE-Other
その他 		CVE-2010-1514 2012-12-20 19:29 2010-06-15 Show GitHub Exploit DB Packet Storm
228279 4.3 警告 tatsuhiro tsujikawa - aria2 におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1512 2012-12-20 19:29 2010-05-17 Show GitHub Exploit DB Packet Storm
228280 3.5 注意 PmWiki - PmWiki の table 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1481 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310651 - vincent_tietz vjchat SQL injection vulnerability in the AJAX Chat (vjchat) extension before 0.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4971 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310652 - typo3-macher t3m_affiliate SQL injection vulnerability in the t3m_affiliate extension 0.5.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4970 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310653 - typo3 sbanner SQL injection vulnerability in the Solidbase Bannermanagement (SBbanner) extension 1.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4969 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310654 - christian_ehmann event_registr SQL injection vulnerability in the Event Registration (event_registr) extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4968 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310655 - jochen_rieger car SQL injection vulnerability in the Car (car) extension before 0.1.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4967 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310656 - elemente ast_addresszipsearch SQL injection vulnerability in the AST ZipCodeSearch (ast_addresszipsearch) extension 0.5.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4966 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310657 - thomas_waggershauser air_lexicon SQL injection vulnerability in the AIRware Lexicon (air_lexicon) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2009-4965 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310658 - ksplayer ksp_sound_player Stack-based buffer overflow in KSP 2006 FINAL allows remote attackers to execute arbitrary code via a long string in a .M3U playlist file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-4964 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310659 - typo3 commerce_extension Cross-site scripting (XSS) vulnerability in the Commerce extension before 0.9.9 for TYPO3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2009-4963 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm
310660 - adammo fat_player Stack-based buffer overflow in Fat Player 0.6b allows remote attackers to execute arbitrary code via a long string in a .wav file. NOTE: some of these details are obtained from third party informati… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2009-4962 2024-11-21 10:10 2010-07-28 Show GitHub Exploit DB Packet Storm