Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251411 7.5 危険 TimeTrack - Joomla! 用 TimeTrack コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4926 2012-02-28 13:53 2011-10-9 Show GitHub Exploit DB Packet Storm
251412 7.5 危険 Nuked-Klan - Nuked-Klan 用 Partenaires モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4925 2012-02-28 13:40 2011-10-9 Show GitHub Exploit DB Packet Storm
251413 7.5 危険 Virtue Netz - Virtue Netz Virtue Book Store における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4923 2012-02-28 13:39 2011-10-9 Show GitHub Exploit DB Packet Storm
251414 7.5 危険 Allinta - Allinta CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4922 2012-02-28 11:20 2011-10-9 Show GitHub Exploit DB Packet Storm
251415 7.5 危険 DMXReady - DMXReady Polling Booth Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4921 2012-02-28 11:18 2011-10-8 Show GitHub Exploit DB Packet Storm
251416 7.5 危険 Micronetsoft - Micronetsoft Rental Property Management Website の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4920 2012-02-28 11:04 2011-10-8 Show GitHub Exploit DB Packet Storm
251417 7.5 危険 Micronetsoft - Micronetsoft RV Dealer Website の detail.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4919 2012-02-28 10:55 2011-10-8 Show GitHub Exploit DB Packet Storm
251418 7.5 危険 iJoomla - Joomla! 用 iJoomla Magazine コンポーネントにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-4918 2012-02-28 10:53 2011-10-8 Show GitHub Exploit DB Packet Storm
251419 7.5 危険 Yegnold - A-Blog の sources/search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4917 2012-02-28 10:52 2011-10-8 Show GitHub Exploit DB Packet Storm
251420 7.5 危険 ColdGen - ColdGen ColdUserGroup の index.cfm における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-4916 2012-02-28 10:50 2011-10-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223261 5.5 MEDIUM
Local 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, it is possible to temporarily disable UAC by using the Agent Service on a client system. An authenticated attacker (non-admin) can disable UAC for other users by renamin… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2019-19894 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
223262 7.5 HIGH
Network 		ixpdata easyinstall In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT … CWE-22
Path Traversal 		CVE-2019-19893 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
223263 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=import-category to admin/_cmdstat.jsp via the uploa… CWE-78
OS Command  		CVE-2019-19839 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
223264 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=get-platform-depends to admin/_cmdstat.jsp via the … CWE-78
OS Command  		CVE-2019-19838 2024-11-21 13:35 2020-01-24 Show GitHub Exploit DB Packet Storm
223265 5.3 MEDIUM
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests. NVD-CWE-noinfo
CVE-2019-19837 2024-11-21 13:35 2020-01-23 Show GitHub Exploit DB Packet Storm
223266 7.5 HIGH
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the tools/_rcmdstat.jsp URI. CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2019-19835 2024-11-21 13:35 2020-01-23 Show GitHub Exploit DB Packet Storm
223267 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=spectra-analysis to admin/_cmdstat.jsp via the mac … CWE-78
OS Command  		CVE-2019-19842 2024-11-21 13:35 2020-01-23 Show GitHub Exploit DB Packet Storm
223268 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		emfd in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote attackers to execute OS commands via a POST request with the attribute xcmd=packet-capture to admin/_cmdstat.jsp via the mac at… CWE-78
OS Command  		CVE-2019-19841 2024-11-21 13:35 2020-01-23 Show GitHub Exploit DB Packet Storm
223269 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		A stack-based buffer overflow in zap_parse_args in zap.c in zap in Ruckus Unleashed through 200.7.10.102.64 allows remote code execution via an unauthenticated HTTP request. CWE-787
 Out-of-bounds Write 		CVE-2019-19840 2024-11-21 13:35 2020-01-23 Show GitHub Exploit DB Packet Storm
223270 9.8 CRITICAL
Network 		ruckuswireless unleashed
zonedirector_1200_firmware 		Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote credential fetch via an unauthenticated HTTP request involving a symlink with /tmp and… CWE-552
CWE-522
 Files or Directories Accessible to External Parties
 Insufficiently Protected Credentials 		CVE-2019-19843 2024-11-21 13:35 2020-01-23 Show GitHub Exploit DB Packet Storm