Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228411 4.4 警告 Heshan Wanigasooriya - Drupal 用 Video モジュールにおける任意の PHP コードを実行される脆弱性 CWE-16
環境設定 		CVE-2013-0224 2013-03-22 16:15 2013-01-23 Show GitHub Exploit DB Packet Storm
228412 6.8 警告 Leighton Whiting - Drupal 用 Mark Complete モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-0207 2013-03-22 16:14 2013-01-16 Show GitHub Exploit DB Packet Storm
228413 6 警告 guybedford - Drupal 用 Live CSS モジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2013-0206 2013-03-22 16:13 2013-01-9 Show GitHub Exploit DB Packet Storm
228414 6.8 警告 Klaus Purer - Drupal 用 RESTful Web Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-0205 2013-03-22 16:13 2013-01-16 Show GitHub Exploit DB Packet Storm
228415 3.6 注意 レッドハット - libvirt におけるファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1766 2013-03-22 16:08 2013-03-20 Show GitHub Exploit DB Packet Storm
228416 5 警告 ZoneMinder - ZoneMinder におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-0332 2013-03-22 15:52 2011-05-30 Show GitHub Exploit DB Packet Storm
228417 7.5 危険 ZoneMinder - ZoneMinder の includes/functions.php における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0232 2013-03-22 15:51 2013-01-25 Show GitHub Exploit DB Packet Storm
228418 5.1 警告 David King - Vino における UPnP ルータのポートがオープンになる問題 CWE-Other
その他 		CVE-2011-1165 2013-03-22 14:43 2013-03-12 Show GitHub Exploit DB Packet Storm
228419 4.6 警告 David King - Vino における外部ネットワークに接続される脆弱性 CWE-16
環境設定 		CVE-2011-1164 2013-03-22 14:24 2013-03-12 Show GitHub Exploit DB Packet Storm
228420 6 警告 Samba Project - Samba における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1863 2013-03-22 13:50 2013-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
310091 - hp insight_control_performance_management Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors. NVD-CWE-noinfo
CVE-2010-4031 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310092 - hp insight_control_performance_management Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2010-4030 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310093 - freshwebmaster fresh_ftp Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. NOTE… CWE-22
Path Traversal 		CVE-2010-4149 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310094 - anyconnect anyconnect Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename. CWE-22
Path Traversal 		CVE-2010-4148 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310095 - avactis avactis_shopping_cart Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header … CWE-89
SQL Injection 		CVE-2010-4147 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310096 - attachmate reflection_for_the_web Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and earlier allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2010-4146 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310097 - aspindir kisisel_radyo_script Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-4145 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310098 - aspindir kisisel_radyo_script SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter. CWE-89
SQL Injection 		CVE-2010-4144 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310099 - phpcheckz phpcheckz SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2010-4143 2024-11-21 10:20 2010-11-2 Show GitHub Exploit DB Packet Storm
310100 - adobe shockwave_player Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-4090 2024-11-21 10:20 2010-10-30 Show GitHub Exploit DB Packet Storm