Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
249651 7.5 危険 Prado Portal - Prado Portal の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4958 2012-02-29 14:23 2011-10-9 Show GitHub Exploit DB Packet Storm
249652 7.5 危険 php-programs - APBoard Developers APBoard の board/board.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4955 2012-02-29 14:06 2011-10-9 Show GitHub Exploit DB Packet Storm
249653 7.5 危険 Gambio - xt:Commerce Gambio 2008 の product_reviews_info.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4954 2012-02-29 14:05 2011-10-9 Show GitHub Exploit DB Packet Storm
249654 10 危険 Jens Witt - TYPO3 用 JW Calendar エクステンションにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4953 2012-02-29 11:55 2011-10-9 Show GitHub Exploit DB Packet Storm
249655 7.5 危険 Joachim Ruhs - TYPO3 用 FE user statistic エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4952 2012-02-29 11:51 2011-10-9 Show GitHub Exploit DB Packet Storm
249656 5 警告 Thomas Mammitzsch - TYPO3 用 xaJax Shoutbox エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4951 2012-02-29 11:48 2011-10-9 Show GitHub Exploit DB Packet Storm
249657 7.5 危険 Joachim Ruhs - TYPO3 用 Event エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4950 2012-02-29 11:42 2011-10-9 Show GitHub Exploit DB Packet Storm
249658 4.3 警告 Codologic.com - Joomla! 用 FreiChat および FreiChatPure におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4949 2012-02-29 11:21 2011-10-9 Show GitHub Exploit DB Packet Storm
249659 7.5 危険 Phpgalleryscript - PHP Free Photo Gallery script における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション
CVE-2010-4948 2012-02-29 11:19 2011-10-9 Show GitHub Exploit DB Packet Storm
249660 4.3 警告 Allpcscript - ALLPC の advanced_search_result.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4947 2012-02-29 11:17 2011-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198021 9.8 CRITICAL
Network
wl-enq_project wl-enq WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors. CWE-78
OS Command 
CVE-2020-5560 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198022 6.1 MEDIUM
Network
wl-enq_project wl-enq Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2020-5559 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198023 8.8 HIGH
Network
cutephp cutenews CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors. CWE-94
Code Injection
CVE-2020-5558 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198024 6.1 MEDIUM
Network
cutephp cutenews Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2020-5557 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198025 9.8 CRITICAL
Network
shihonkanri_plus_goout_project shihonkanri_plus_goout Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command 
CVE-2020-5556 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198026 9.1 CRITICAL
Network
shihonkanri_plus_goout_project shihonkanri_plus_goout Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper in… CWE-20
 Improper Input Validation 
CVE-2020-5555 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198027 9.1 CRITICAL
Network
shihonkanri_plus_goout_project shihonkanri_plus_goout Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors. CWE-22
Path Traversal
CVE-2020-5554 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198028 9.8 CRITICAL
Network
mailform mailform mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors. CWE-94
Code Injection
CVE-2020-5553 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198029 6.1 MEDIUM
Network
mailform mailform Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2020-5552 2024-11-21 14:34 2020-03-25 Show GitHub Exploit DB Packet Storm
198030 9.8 CRITICAL
Network
grandstream ucm6200_firmware The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote SQL injection via crafted HTTP request. An attacker can use this vulnerability to execute shell command… CWE-89
SQL Injection
CVE-2020-5722 2024-11-21 14:34 2020-03-24 Show GitHub Exploit DB Packet Storm