Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249051 5 警告 TYPO3 Association - TYPO3 の mod/tools/em/class.em_unzip.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-5102 2012-05-23 16:47 2010-12-16 Show GitHub Exploit DB Packet Storm
249052 4 警告 TYPO3 Association - TYPO3 の TypoScript 設定におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-5101 2012-05-23 16:47 2010-12-16 Show GitHub Exploit DB Packet Storm
249053 3.5 注意 TYPO3 Association - TYPO3 の Install ツールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5100 2012-05-23 16:42 2010-12-16 Show GitHub Exploit DB Packet Storm
249054 3.5 注意 TYPO3 Association - TYPO3 の FORM コンテンツオブジェクトにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5098 2012-05-23 16:41 2010-12-16 Show GitHub Exploit DB Packet Storm
249055 2.6 注意 TYPO3 Association - TYPO3 のクリック拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-5097 2012-05-23 16:23 2010-12-16 Show GitHub Exploit DB Packet Storm
249056 6.4 警告 Atlassian - 複数の Atlassian 製品における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2926 2012-05-23 16:23 2012-05-22 Show GitHub Exploit DB Packet Storm
249057 2.6 注意 Xelex - Android 用の Xelex MobileTrack アプリケーションにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-2567 2012-05-23 15:35 2012-05-22 Show GitHub Exploit DB Packet Storm
249058 7.6 危険 Xelex - Android 用の Xelex MobileTrack アプリケーションにおけるコマンドを実行される脆弱性 CWE-20
CWE-287
CVE-2012-2562 2012-05-23 15:33 2012-05-22 Show GitHub Exploit DB Packet Storm
249059 10 危険 シマンテック - Symantec Web Gateway の管理画面における任意のコードをアップロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0299 2012-05-23 13:50 2012-05-17 Show GitHub Exploit DB Packet Storm
249060 6.4 警告 シマンテック - Symantec Web Gateway の管理画面のファイル管理スクリプトにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0298 2012-05-23 13:47 2012-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210151 9.8 CRITICAL
Network
pbootcms pbootcms Remote Code Execution vulnerability in PbootCMS 2.0.8 in the message board. NVD-CWE-noinfo
CVE-2020-23580 2024-11-21 14:13 2021-07-9 Show GitHub Exploit DB Packet Storm
210152 4.8 MEDIUM
Network
phplist phplist Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin. CWE-79
Cross-site Scripting
CVE-2020-22251 2024-11-21 14:13 2021-07-7 Show GitHub Exploit DB Packet Storm
210153 9.8 CRITICAL
Network
phplist phplist Remote Code Execution vulnerability in phplist 3.5.1. The application does not check any file extensions stored in the plugin zip file, Uploading a malicious plugin which contains the php files with … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-22249 2024-11-21 14:13 2021-07-7 Show GitHub Exploit DB Packet Storm
210154 5.4 MEDIUM
Network
phplist phplist A stored cross site scripting (XSS) vulnerability in the "Import Subscribers" feature in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted … CWE-79
Cross-site Scripting
CVE-2020-23194 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm
210155 5.4 MEDIUM
Network
phplist phplist A stored cross site scripting (XSS) vulnerability in phplist 3.5.4 and below allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload in the "admin" parameter und… CWE-79
Cross-site Scripting
CVE-2020-23192 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm
210156 5.4 MEDIUM
Network
phplist phplist A stored cross site scripting (XSS) vulnerability in the "Import emails" module in phplist 3.5.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload. CWE-79
Cross-site Scripting
CVE-2020-23190 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm
210157 5.4 MEDIUM
Network
php-fusion php-fusion A stored cross site scripting (XSS) vulnerability in /administration/setting_security.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted p… CWE-79
Cross-site Scripting
CVE-2020-23185 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm
210158 5.4 MEDIUM
Network
php-fusion php-fusion A stored cross site scripting (XSS) vulnerability in /administration/settings_registration.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a craf… CWE-79
Cross-site Scripting
CVE-2020-23184 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm
210159 5.4 MEDIUM
Network
php-fusion php-fusion The component /php-fusion/infusions/shoutbox_panel/shoutbox_archive.php in PHP-Fusion 9.03.60 allows attackers to redirect victim users to malicious websites via a crafted payload entered into the Sh… CWE-601
Open Redirect
CVE-2020-23182 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm
210160 5.4 MEDIUM
Network
php-fusion php-fusion A reflected cross site scripting (XSS) vulnerability in /administration/theme.php of PHP-Fusion 9.03.60 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload e… CWE-79
Cross-site Scripting
CVE-2020-23181 2024-11-21 14:13 2021-07-3 Show GitHub Exploit DB Packet Storm