Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251201	5	警告	energyscripts	-	ES Simple Download の download.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3456	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251202	4.3	警告	ATutor	-	AChecker の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3455	2012-03-27 18:42	2010-09-17	Show	GitHub Exploit DB Packet Storm

251203	6.8	警告	FFmpeg mplayerhq	-	MPlayer などの製品で使用される FFmpeg の flicvideo.c における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3429	2012-03-27 18:42	2010-09-30	Show	GitHub Exploit DB Packet Storm

251204	7.5	危険	Intermesh	-	Intermesh Group-Office の modules/notes/json.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3428	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251205	4.3	警告	Open Classifieds	-	Open Classifieds におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3427	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251206	7.5	危険	4you-studio	-	Joomla! 用の Alpha の JPhone (com_jphone) コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3426	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251207	4.3	警告	SmarterTools Inc.	-	SmarterStats の UserControls/Popups/frmHelp.aspx におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3425	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

251208	4.3	警告	Invision Power Services, Inc	-	IP.Board の admin/sources/classes/bbcode/custom/defaults.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3424	2012-03-27 18:42	2010-09-7	Show	GitHub Exploit DB Packet Storm

251209	7.5	危険	freka	-	Drupal の Yr Weatherdata モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3423	2012-03-27 18:42	2010-09-8	Show	GitHub Exploit DB Packet Storm

251210	7.5	危険	solventus Joomla!	-	Jmoola! 用の JGen コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3422	2012-03-27 18:42	2010-09-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223851	7.5	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during a role change.	NVD-CWE-noinfo	CVE-2019-20874	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223852	6.5	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. It allows attackers to obtain sensitive information during user activation/deactivation.	NVD-CWE-noinfo	CVE-2019-20873	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223853	5.5	MEDIUM Local	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-20872	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223854	7.5	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. The Markdown library allows catastrophic backtracking.	NVD-CWE-Other	CVE-2019-20871	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223855	4.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.10.0. An attacker can bypass the intended appearance of the Edited flag after changing a post's file ID.	CWE-20 Improper Input Validation	CVE-2019-20870	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223856	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.10.0, 5.9.1, 5.8.2, and 4.10.9. A non-member could change the Update/Patch Channel endpoint for a private channel.	NVD-CWE-noinfo	CVE-2019-20869	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223857	7.5	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.11.0. Invite IDs were improperly generated.	CWE-20 Improper Input Validation	CVE-2019-20868	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223858	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.11.0. An attacker can interfere with a channel's post loading via one crafted post.	NVD-CWE-noinfo	CVE-2019-20867	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223859	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.12.0. Use of a Proxy HTTP header, rather than the source address in an IP packet header, for obtaining IP address information was mishandled.	CWE-444 HTTP Request Smuggling	CVE-2019-20866	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

223860	8.8	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 5.12.0, 5.11.1, 5.10.2, 5.9.2, and 4.10.10. The login page allows CSRF.	CWE-352 Origin Validation Error	CVE-2019-20865	2024-11-21 13:39	2020-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed