Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
250371 7.5 危険 webscripti - Mafya Oyun Scrpti の profil.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4619 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250372 4.3 警告 algisinfo - Joomla! の Algis Info aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4618 2012-03-27 18:42 2010-12-16 Show GitHub Exploit DB Packet Storm
250373 6.8 警告 Kanich - Joomla! の JotLoader (com_jotloader) コンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4617 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250374 9.3 危険 リアルネットワークス - RealNetworks Helix Server および Helix Mobile Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-4596 2012-03-27 18:42 2011-03-31 Show GitHub Exploit DB Packet Storm
250375 4.3 警告 ImpressCMS - ImpressCMS の modules/content/admin/content.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4616 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250376 7.5 危険 iskenderaltuntas - Oto Galeri Sistemi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4615 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250377 7.5 危険 MH Products - Ero Auktion の item.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4614 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250378 7.5 危険 Hycus CMS project - Hycus CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-4613 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250379 6.8 警告 Hycus CMS project - Hycus CMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4612 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
250380 5 警告 html-edit - Html-edit CMS における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-4611 2012-03-27 18:42 2010-12-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196001 8.8 HIGH
Network 		daifukuya kagemai Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors. CWE-352
 Origin Validation Error 		CVE-2021-20687 2024-11-21 14:47 2021-04-7 Show GitHub Exploit DB Packet Storm
196002 6.1 MEDIUM
Network 		daifukuya kagemai Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2021-20686 2024-11-21 14:47 2021-04-7 Show GitHub Exploit DB Packet Storm
196003 6.1 MEDIUM
Network 		daifukuya kagemai Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2021-20685 2024-11-21 14:47 2021-04-7 Show GitHub Exploit DB Packet Storm
196004 6.1 MEDIUM
Network 		magazinegerz_project magazinegerz Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2021-20684 2024-11-21 14:47 2021-04-7 Show GitHub Exploit DB Packet Storm
196005 5.4 MEDIUM
Network 		basercms basercms Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecifie… CWE-79
Cross-site Scripting 		CVE-2021-20683 2024-11-21 14:47 2021-03-26 Show GitHub Exploit DB Packet Storm
196006 7.2 HIGH
Network 		basercms basercms baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command  		CVE-2021-20682 2024-11-21 14:47 2021-03-26 Show GitHub Exploit DB Packet Storm
196007 5.4 MEDIUM
Network 		basercms basercms Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vector… CWE-79
Cross-site Scripting 		CVE-2021-20681 2024-11-21 14:47 2021-03-26 Show GitHub Exploit DB Packet Storm
196008 7.5 HIGH
Network 		schema-inspector_project
netapp 		schema-inspector
oncommand_insight
e-series_performance_analyzer 		Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation is vulnerable to a denial-of-service atta… - CVE-2021-21267 2024-11-21 14:47 2021-03-20 Show GitHub Exploit DB Packet Storm
196009 8.8 HIGH
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-416
 Use After Free 		CVE-2021-21193 2024-11-21 14:47 2021-03-17 Show GitHub Exploit DB Packet Storm
196010 8.8 HIGH
Network 		google
fedoraproject
debian 		chrome
fedora
debian_linux 		Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CWE-787
 Out-of-bounds Write 		CVE-2021-21192 2024-11-21 14:47 2021-03-17 Show GitHub Exploit DB Packet Storm