Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229011 7.5 危険 smart-plugs - smartplugs の showplugs.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1271 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229012 7.5 危険 phpscripte24 - Multi Auktions Komplett System の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1270 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229013 7.5 危険 phpscripte24 - phpscripte24 Niedrig Gebote Pro Auktions System II の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1269 2012-12-20 19:29 2010-04-6 Show GitHub Exploit DB Packet Storm
229014 6.8 警告 stafford.uklinux - libESMTP の smtp-tls.c における信頼済み証明書を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2010-1194 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
229015 6.8 警告 stafford.uklinux - libESMTP における任意の SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2010-1192 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
229016 6.4 警告 sahanafoundation - Sahana 災害管理システムにおけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-1191 2012-12-20 19:29 2010-03-31 Show GitHub Exploit DB Packet Storm
229017 10 危険 SAP - SAP MaxDB の serv.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1185 2012-12-20 19:29 2010-03-29 Show GitHub Exploit DB Packet Storm
229018 3.3 注意 サン・マイクロシステムズ - Oracle Solaris の特定の patch-installation スクリプトにおける任意のファイルへのデータを追加される脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-1183 2012-12-20 19:29 2010-03-29 Show GitHub Exploit DB Packet Storm
229019 4.3 警告 phpmysite - phpMySite の contact.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1091 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
229020 7.5 危険 phpmysite - phpMySite の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1090 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225011 6.2 MEDIUM
Local 		zte mf910s_firmware The Sec Consult Security Lab reported an information disclosure vulnerability in MF910S product to ZTE PSIRT in October 2019. Through the analysis of related product team, the information disclosure … CWE-200
Information Exposure 		CVE-2019-3422 2024-11-21 13:42 2019-11-8 Show GitHub Exploit DB Packet Storm
225012 4.3 MEDIUM
Network 		dell idrac8_firmware
idrac9_firmware
idrac7_firmware 		Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malic… NVD-CWE-Other
CVE-2019-3764 2024-11-21 13:42 2019-11-8 Show GitHub Exploit DB Packet Storm
225013 7.7 HIGH
Network 		opensuse open_build_service Open Build Service before version 0.165.4 diddn't validate TLS certificates for HTTPS connections with the osc client binary CWE-295
Improper Certificate Validation  		CVE-2019-3685 2024-11-21 13:42 2019-11-5 Show GitHub Exploit DB Packet Storm
225014 8.0 HIGH
Adjacent 		ztw zx297520v3_firmware The 7520V3V1.0.0B09P27 version, and all earlier versions of ZTE product ZX297520V3 are impacted by a Command Injection vulnerability. Unauthorized users can exploit this vulnerability to control the … CWE-77
Command Injection 		CVE-2019-3421 2024-11-21 13:42 2019-11-1 Show GitHub Exploit DB Packet Storm
225015 5.7 MEDIUM
Adjacent 		zte zxmp_m721_dx_firmware A security vulnerability exists in a management port in the version of ZTE's ZXMP M721V3.10P01B10_M2NCP. An attacker could exploit this vulnerability to build a link to the device and send specific p… NVD-CWE-noinfo
CVE-2019-3419 2024-11-21 13:42 2019-11-1 Show GitHub Exploit DB Packet Storm
225016 7.5 HIGH
Network 		mikrotik routeros RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even when the records are unrelated to the d… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2019-3979 2024-11-21 13:42 2019-10-30 Show GitHub Exploit DB Packet Storm
225017 7.5 HIGH
Network 		mikrotik routeros RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attac… CWE-306
Missing Authentication for Critical Function 		CVE-2019-3978 2024-11-21 13:42 2019-10-30 Show GitHub Exploit DB Packet Storm
225018 7.5 HIGH
Network 		mikrotik routeros RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can tric… CWE-494
 Download of Code Without Integrity Check 		CVE-2019-3977 2024-11-21 13:42 2019-10-30 Show GitHub Exploit DB Packet Storm
225019 8.8 HIGH
Network 		mikrotik routeros RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field. If an authenticated user installs a … CWE-22
Path Traversal 		CVE-2019-3976 2024-11-21 13:42 2019-10-30 Show GitHub Exploit DB Packet Storm
225020 7.8 HIGH
Local 		mcafee total_protection A File Masquerade vulnerability in McAfee Total Protection (MTP) version 16.0.R21 and earlier in Windows client allowed an attacker to read the plaintext list of AV-Scan exclusion files from the Wind… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2019-3636 2024-11-21 13:42 2019-10-29 Show GitHub Exploit DB Packet Storm