Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250291 7.5 危険 esoftpro - esoftpro Online Photo Pro の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4999 2011-12-9 14:21 2011-11-1 Show GitHub Exploit DB Packet Storm
250292 7.5 危険 esoftpro - esoftpro Online Contact Manager の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5001 2011-12-9 14:21 2011-11-1 Show GitHub Exploit DB Packet Storm
250293 4.3 警告 Exponent CMS project - Exponent CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5002 2011-12-9 14:20 2011-11-1 Show GitHub Exploit DB Packet Storm
250294 7.5 危険 Autartica - Joomla! 用 の AutarTimonial コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5003 2011-12-9 14:20 2011-11-1 Show GitHub Exploit DB Packet Storm
250295 4.3 警告 VideoWhisper.com - VideoWhisper PHP 2 Way Video Chat コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4971 2011-12-9 14:19 2011-11-2 Show GitHub Exploit DB Packet Storm
250296 7.5 危険 OlyKit - OlyKit Swoopo Clone 2010 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4997 2011-12-9 14:18 2011-11-2 Show GitHub Exploit DB Packet Storm
250297 7.5 危険 Maulana Al Matien - ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4998 2011-12-9 14:18 2011-11-2 Show GitHub Exploit DB Packet Storm
250298 7.5 危険 Joe Pieruccini - MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5000 2011-12-9 14:17 2011-11-2 Show GitHub Exploit DB Packet Storm
250299 7.5 危険 2daybiz - 2daybiz Polls Script の searchvote.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-5004 2011-12-9 14:16 2011-11-2 Show GitHub Exploit DB Packet Storm
250300 4.3 警告 Rayzz - Rayzz Photoz の members/profileCommentsResponse.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-5005 2011-12-9 14:15 2011-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 10, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210791 7.5 HIGH
Network 		jetbrains teamcity In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session. CWE-613
 Insufficient Session Expiration 		CVE-2020-11688 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210792 7.5 HIGH
Network 		jetbrains teamcity In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages. CWE-200
Information Exposure 		CVE-2020-11687 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210793 2.7 LOW
Network 		jetbrains teamcity In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings. NVD-CWE-noinfo
CVE-2020-11686 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210794 7.5 HIGH
Network 		jetbrains goland In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-11685 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210795 8.1 HIGH
Adjacent 		titan sf_rush_smart_band_firmware An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the a… CWE-347
CWE-306
CWE-319
 Improper Verification of Cryptographic Signature
Missing Authentication for Critical Function
Cleartext Transmission of Sensitive Information 		CVE-2020-11539 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210796 5.3 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized editing of usergroups. NVD-CWE-noinfo
CVE-2020-11891 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210797 5.3 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.17. Improper input validations in the usergroup table class could lead to a broken ACL configuration. CWE-20
 Improper Input Validation  		CVE-2020-11890 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210798 5.3 MEDIUM
Network 		joomla joomla\! An issue was discovered in Joomla! before 3.9.17. Incorrect ACL checks in the access level section of com_users allow the unauthorized deletion of usergroups. NVD-CWE-noinfo
CVE-2020-11889 2024-11-21 13:58 2020-04-22 Show GitHub Exploit DB Packet Storm
210799 7.5 HIGH
Network 		oppo coloros In ColorOS (oppo mobile phone operating system, based on AOSP frameworks/native code position/services/surfaceflinger surfaceflinger.CPP), RGB is defined on the stack but uninitialized, so when the s… CWE-908
 Use of Uninitialized Resource 		CVE-2020-11828 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm
210800 7.8 HIGH
Local 		re2c
canonical 		re2c
ubuntu_linux 		re2c 1.3 has a heap-based buffer overflow in Scanner::fill in parse/scanner.cc via a long lexeme. CWE-787
 Out-of-bounds Write 		CVE-2020-11958 2024-11-21 13:58 2020-04-21 Show GitHub Exploit DB Packet Storm