Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252061	7.5	危険	NeoJoomla	-	Joomla! 用 NeoRecruit コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4995	2011-12-9 14:23	2011-11-1	Show	GitHub Exploit DB Packet Storm

252062	7.5	危険	esoftpro	-	esoftpro Online Guestbook Pro の ogp_show.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4996	2011-12-9 14:22	2011-11-1	Show	GitHub Exploit DB Packet Storm

252063	7.5	危険	esoftpro	-	esoftpro Online Photo Pro の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4999	2011-12-9 14:21	2011-11-1	Show	GitHub Exploit DB Packet Storm

252064	7.5	危険	esoftpro	-	esoftpro Online Contact Manager の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5001	2011-12-9 14:21	2011-11-1	Show	GitHub Exploit DB Packet Storm

252065	4.3	警告	Exponent CMS project	-	Exponent CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5002	2011-12-9 14:20	2011-11-1	Show	GitHub Exploit DB Packet Storm

252066	7.5	危険	Autartica	-	Joomla! 用の AutarTimonial コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5003	2011-12-9 14:20	2011-11-1	Show	GitHub Exploit DB Packet Storm

252067	4.3	警告	VideoWhisper.com	-	VideoWhisper PHP 2 Way Video Chat コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4971	2011-12-9 14:19	2011-11-2	Show	GitHub Exploit DB Packet Storm

252068	7.5	危険	OlyKit	-	OlyKit Swoopo Clone 2010 の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4997	2011-12-9 14:18	2011-11-2	Show	GitHub Exploit DB Packet Storm

252069	7.5	危険	Maulana Al Matien	-	ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4998	2011-12-9 14:18	2011-11-2	Show	GitHub Exploit DB Packet Storm

252070	7.5	危険	Joe Pieruccini	-	MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5000	2011-12-9 14:17	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224391	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrar…	CWE-787 Out-of-bounds Write	CVE-2019-16735	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224392	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	Use of default credentials for the TELNET server in Petwant PF-103 firmware 4.3.2.50 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.	CWE-798 Use of Hard-coded Credentials	CVE-2019-16734	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224393	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	processCommandSetUid() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.	CWE-78 OS Command	CVE-2019-16733	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224394	8.1	HIGH Network	skymee petwant	petalk_ai_firmware pf-103_firmware	Unencrypted HTTP communications for firmware upgrades in Petalk AI and PF-103 allow man-in-the-middle attackers to run arbitrary code as the root user.	CWE-347 CWE-319 Improper Verification of Cryptographic Signature Cleartext Transmission of Sensitive Information	CVE-2019-16732	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224395	7.5	HIGH Network	skymee petwant	petalk_ai_firmware pf-103_firmware	The udpServerSys service in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to initiate firmware upgrades and alter device settings.	CWE-306 Missing Authentication for Critical Function	CVE-2019-16731	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224396	9.8	CRITICAL Network	skymee petwant	petalk_ai_firmware pf-103_firmware	processCommandUpgrade() in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to execute arbitrary system commands as the root user.	CWE-78 OS Command	CVE-2019-16730	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224397	7.5	HIGH Network	egain	mail	The eGain Web Email API 11+ allows spoofed messages because the fromName and message fields (to /system/ws/v11/ss/email) are mishandled, as demonstrated by fromName header injection with a %0a or %0d…	CWE-74 Injection	CVE-2019-17123	2024-11-21 13:31	2019-12-14	Show	GitHub Exploit DB Packet Storm

224398	9.8	CRITICAL Network	phpfastcache	phpfastcache	In phpfastcache before 5.1.3, there is a possible object injection vulnerability in cookie driver.	CWE-502 Deserialization of Untrusted Data	CVE-2019-16774	2024-11-21 13:31	2019-12-13	Show	GitHub Exploit DB Packet Storm

224399	6.5	MEDIUM Network	npmjs opensuse oracle fedoraproject redhat	npm leap graalvm fedora enterprise_linux enterprise_linux_eus	Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For e…	CWE-269 Improper Privilege Management	CVE-2019-16777	2024-11-21 13:31	2019-12-13	Show	GitHub Exploit DB Packet Storm

224400	8.1	HIGH Network	npmjs opensuse oracle fedoraproject redhat	npm leap graalvm fedora enterprise_linux enterprise_linux_eus	Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules folder through the bin field. A properly …	CWE-22 Path Traversal	CVE-2019-16776	2024-11-21 13:31	2019-12-13	Show	GitHub Exploit DB Packet Storm