Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251481 5 警告 Blue River - Mura CMS および Sava CMS の fileManager.cfc におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3468 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
251482 6.8 警告 E-Xoopport - E-Xoopport Samsara における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3467 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251483 4.3 警告 NetArt Media - NetArt Media iBoutique.MALL の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3466 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251484 4.3 警告 ecommercesoft - XSE Shopping Cart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3465 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251485 6.8 警告 santafox - SantaFox の admin/manager_users.class.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-3464 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251486 4.3 警告 santafox - SantaFox の modules/search/search.class.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3463 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251487 4.3 警告 mollify - Mollify の backend/plugin/Registration/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3462 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251488 7.5 危険 endonesia - eNdonesia の Publisher モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3461 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251489 5 警告 Gecad Technologies - AXIGEN Mail Server の HTTP インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3460 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251490 4.3 警告 Gecad Technologies - AXIGEN Mail Server の Ajax WebMail インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3459 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
224591 5.4 MEDIUM
Network
oracle weblogic_server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). The supported version that is affected is 10.3.6.0. Easily exploitable vulnerabil… NVD-CWE-noinfo
CVE-2019-2395 2024-11-21 13:40 2019-01-17 Show GitHub Exploit DB Packet Storm
224592 7.5 HIGH
Network
sage sage_frp_1000 A path traversal vulnerability exists in Sage FRP 1000 before November 2019. This allows remote unauthenticated attackers to access files outside of the web tree via a crafted URL. CWE-22
Path Traversal
CVE-2019-25053 2024-11-21 13:39 2023-01-28 Show GitHub Exploit DB Packet Storm
224593 5.3 MEDIUM
Network
afkmods qsf-portal A vulnerability classified as critical was found in Arthmoor QSF-Portal. This vulnerability affects unknown code of the file index.php. The manipulation of the argument a leads to path traversal. The… CWE-22
Path Traversal
CVE-2019-25099 2024-11-21 13:39 2023-01-6 Show GitHub Exploit DB Packet Storm
224594 7.5 HIGH
Network
goa.design goa Improper path sanitization in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory. CWE-22
Path Traversal
CVE-2019-25073 2024-11-21 13:39 2022-12-28 Show GitHub Exploit DB Packet Storm
224595 5.4 MEDIUM
Network
oxidized_web_project oxidized_web A vulnerability was found in ytti Oxidized Web. It has been classified as problematic. Affected is an unknown function of the file lib/oxidized/web/views/conf_search.haml. The manipulation of the arg… - CVE-2019-25088 2024-11-21 13:39 2022-12-27 Show GitHub Exploit DB Packet Storm
224596 4.3 MEDIUM
Network
ethex ethex_contracts A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the file EthexJackpot.sol of the component Monthly Jackpot Handler. The manipulation … - CVE-2019-25157 2024-11-21 13:39 2023-12-19 Show GitHub Exploit DB Packet Storm
224597 6.1 MEDIUM
Network
dstar2018 agency A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument Q… - CVE-2019-25156 2024-11-21 13:39 2023-11-7 Show GitHub Exploit DB Packet Storm
224598 6.1 MEDIUM
Network
cure53 dompurify DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute. CWE-601
Open Redirect
CVE-2019-25155 2024-11-21 13:39 2023-11-7 Show GitHub Exploit DB Packet Storm
224599 10.0 CRITICAL
Network
mozilla firefox A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. This vulnerability affects Firefox < 70. NVD-CWE-noinfo
CVE-2019-25136 2024-11-21 13:39 2023-06-19 Show GitHub Exploit DB Packet Storm
224600 7.2 HIGH
Network
umbraco umbraco_cms Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx. CWE-91
Blind XPath Injection
CVE-2019-25137 2024-11-21 13:39 2023-05-18 Show GitHub Exploit DB Packet Storm