Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251421 4.3 警告 ColdGen - ColdGen ColdUserGroup の search 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4913 2012-02-28 10:41 2011-10-8 Show GitHub Exploit DB Packet Storm
251422 7.5 危険 Discuz - UCenter Home の shop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4912 2012-02-28 10:40 2011-10-8 Show GitHub Exploit DB Packet Storm
251423 7.5 危険 Sell@Site - PHP Classifieds Ads の classi/detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4911 2012-02-28 10:39 2011-10-8 Show GitHub Exploit DB Packet Storm
251424 7.5 危険 ColdGen - ColdGen ColdCalendar の index.cfm におけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4910 2012-02-28 10:37 2011-10-8 Show GitHub Exploit DB Packet Storm
251425 4.3 警告 Mechbunny - PaysiteReviewCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-4909 2012-02-28 10:36 2011-10-8 Show GitHub Exploit DB Packet Storm
251426 7.5 危険 Virtue Netz - Virtue Shopping Mall の detail.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-4908 2012-02-28 10:35 2011-10-8 Show GitHub Exploit DB Packet Storm
251427 4.3 警告 Powie - Powie pFile の pfile/kommentar.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1211 2012-02-27 17:12 2012-02-24 Show GitHub Exploit DB Packet Storm
251428 4.3 警告 Apache Software Foundation - Apache HTTP Server の mod_proxy モジュールにおけるイントラネットサーバにリクエストを送信される脆弱性 CWE-20
不適切な入力確認
CVE-2011-3639 2012-02-27 17:01 2011-10-25 Show GitHub Exploit DB Packet Storm
251429 4.3 警告 Zimbra - Zimbra Web Client の zimbra/h/calendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1213 2012-02-27 16:48 2012-02-24 Show GitHub Exploit DB Packet Storm
251430 4.3 警告 SMW+ - Semantic Enterprise Wiki の smwfOnSfSetTargetName 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1212 2012-02-27 16:47 2012-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223511 6.1 MEDIUM
Network
gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows XSS involving the wpf-dw-td-value class of dashboard.php. CWE-79
Cross-site Scripting
CVE-2019-19112 2024-11-21 13:34 2020-06-15 Show GitHub Exploit DB Packet Storm
223512 6.1 MEDIUM
Network
gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases langid parameter. CWE-79
Cross-site Scripting
CVE-2019-19111 2024-11-21 13:34 2020-06-15 Show GitHub Exploit DB Packet Storm
223513 4.8 MEDIUM
Network
gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows XSS via the wp-admin/admin.php?page=wpforo-phrases s parameter. CWE-79
Cross-site Scripting
CVE-2019-19110 2024-11-21 13:34 2020-06-15 Show GitHub Exploit DB Packet Storm
223514 8.8 HIGH
Network
gvectors wpforo The wpForo plugin 1.6.5 for WordPress allows wp-admin/admin.php?page=wpforo-usergroups CSRF. CWE-352
 Origin Validation Error
CVE-2019-19109 2024-11-21 13:34 2020-06-15 Show GitHub Exploit DB Packet Storm
223515 4.6 MEDIUM
Physics
huawei alp-al00b_firmware
alp-l09_firmware
alp-l29_firmware
anne-al00_firmware
bla-al00b_firmware
bla-l09c_firmware
bla-l29c_firmware
berkeley-al20_firmware
berkeley-l09_firmware
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the … NVD-CWE-noinfo
CVE-2019-19412 2024-11-21 13:34 2020-06-9 Show GitHub Exploit DB Packet Storm
223516 6.1 MEDIUM
Network
wowza streaming_engine A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.… CWE-79
Cross-site Scripting
CVE-2019-19456 2024-11-21 13:34 2020-05-19 Show GitHub Exploit DB Packet Storm
223517 7.5 HIGH
Network
wowza streaming_engine An arbitrary file download was found in the "Download Log" functionality of Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0. NVD-CWE-noinfo
CVE-2019-19454 2024-11-21 13:34 2020-05-19 Show GitHub Exploit DB Packet Storm
223518 7.8 HIGH
Local
tobesoft xplatform A use-after-free vulnerability in the TOBESOFT XPLATFORM versions 9.1 to 9.2.2 may lead to code execution on a system running it. CWE-416
 Use After Free
CVE-2019-19162 2024-11-21 13:34 2020-05-12 Show GitHub Exploit DB Packet Storm
223519 8.8 HIGH
Network
raonwiz dext5 dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote… NVD-CWE-noinfo
CVE-2019-19164 2024-11-21 13:34 2020-05-8 Show GitHub Exploit DB Packet Storm
223520 9.8 CRITICAL
Network
raonwiz dext5 Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leve… NVD-CWE-noinfo
CVE-2019-19169 2024-11-21 13:34 2020-05-6 Show GitHub Exploit DB Packet Storm