Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251181	4.3	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるセッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2010-3471	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251182	4.3	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3470	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251183	5	警告	Blue River	-	Mura CMS および Sava CMS の fileManager.cfc におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3468	2012-03-27 18:42	2010-09-29	Show	GitHub Exploit DB Packet Storm

251184	6.8	警告	E-Xoopport	-	E-Xoopport Samsara における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3467	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251185	4.3	警告	NetArt Media	-	NetArt Media iBoutique.MALL の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3466	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251186	4.3	警告	ecommercesoft	-	XSE Shopping Cart におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3465	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251187	6.8	警告	santafox	-	SantaFox の admin/manager_users.class.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-3464	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251188	4.3	警告	santafox	-	SantaFox の modules/search/search.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3463	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251189	4.3	警告	mollify	-	Mollify の backend/plugin/Registration/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3462	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251190	7.5	危険	endonesia	-	eNdonesia の Publisher モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3461	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223851	7.5	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during a role change.	NVD-CWE-noinfo	CVE-2019-20874	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223852	6.5	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation.	NVD-CWE-noinfo	CVE-2019-20873	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223853	5.5	MEDIUM Local	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-20872	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223854	7.5	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking.	NVD-CWE-Other	CVE-2019-20871	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223855	4.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.10.0. An attacker can bypass the intended appearance of the Edited flag after changing a post's file ID.	CWE-20 Improper Input Validation	CVE-2019-20870	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223856	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel.	NVD-CWE-noinfo	CVE-2019-20869	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223857	7.5	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated.	CWE-20 Improper Input Validation	CVE-2019-20868	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223858	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.11.0. An attacker can interfere with a channel's post loading via one crafted post.	NVD-CWE-noinfo	CVE-2019-20867	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223859	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather than the source address in an IP packet header, for obtaining IP address information was mishandled.	CWE-444 HTTP Request Smuggling	CVE-2019-20866	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223860	8.8	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10. The login page allows CSRF.	CWE-352 Origin Validation Error	CVE-2019-20865	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed