Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252141	7.5	危険	WebManager Pro	-	CMS WebManager-Pro の c.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4899	2012-01-19 11:42	2011-10-8	Show	GitHub Exploit DB Packet Storm

252142	7.5	危険	Gantry framework	-	Joomla! 用 Gantry における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4898	2012-01-19 11:41	2011-10-8	Show	GitHub Exploit DB Packet Storm

252143	7.5	危険	BlueCms	-	BlueCMS の comment.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4897	2012-01-19 11:41	2011-10-8	Show	GitHub Exploit DB Packet Storm

252144	4.3	警告	Expinion.net	-	Member Management System の admin/index.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4896	2012-01-19 11:39	2011-10-8	Show	GitHub Exploit DB Packet Storm

252145	4.3	警告	chillyCMS	-	chillyCMS の core/showsite.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4895	2012-01-19 11:38	2011-10-8	Show	GitHub Exploit DB Packet Storm

252146	7.5	危険	chillyCMS	-	chillyCMS の core/showsite.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4894	2012-01-19 11:37	2011-10-8	Show	GitHub Exploit DB Packet Storm

252147	4.3	警告	Skypanther Studios	-	FestOS の foodvendors.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4893	2012-01-19 11:23	2011-10-8	Show	GitHub Exploit DB Packet Storm

252148	4.3	警告	Alex Kellner	-	TYPO3 用の powermail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4892	2012-01-19 11:20	2010-10-26	Show	GitHub Exploit DB Packet Storm

252149	7.5	危険	Andreas Kiefer	-	TYPO3 用の Yet Another Calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4891	2012-01-19 11:20	2010-09-2	Show	GitHub Exploit DB Packet Storm

252150	4.3	警告	Andreas Kiefer	-	TYPO3 用の Yet Another Calendar におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4890	2012-01-19 11:19	2010-09-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
224971	9.4	CRITICAL Network	br-automation	automation_studio automation_runtime	An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration…	CWE-798 Use of Hard-coded Credentials	CVE-2019-19108	2024-11-21 13:34	2020-04-21	Show	GitHub Exploit DB Packet Storm

224972	6.1	MEDIUM Network	northern.tech	cfengine	Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0.	CWE-79 Cross-site Scripting	CVE-2019-19394	2024-11-21 13:34	2020-04-17	Show	GitHub Exploit DB Packet Storm

224973	5.4	MEDIUM Network	matrix42	workspace_management	The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters that lead to multiple reflected XSS issues.	CWE-79 Cross-site Scripting	CVE-2019-19390	2024-11-21 13:34	2020-04-16	Show	GitHub Exploit DB Packet Storm

224974	5.4	MEDIUM Network	matrix42	workspace_management	Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment field of a special order for individual software.	CWE-79 Cross-site Scripting	CVE-2019-19500	2024-11-21 13:34	2020-04-15	Show	GitHub Exploit DB Packet Storm

224975	7.5	HIGH Network	siemens	scalance_xc-200_firmware scalance_xf-200_firmware scalance_xp-200_firmware scalance_xb-200_firmware scalance_x-200irt_firmware scalance_x-200irt_pro_firmware scalance_xr-300wg_firmw…	A vulnerability has been identified in SCALANCE X200-4P IRT, SCALANCE X201-3P IRT, SCALANCE X201-3P IRT PRO, SCALANCE X202-2IRT, SCALANCE X202-2P IRT, SCALANCE X202-2P IRT PRO, SCALANCE X204-2, SCALA…	-	CVE-2019-19301	2024-11-21 13:34	2020-04-15	Show	GitHub Exploit DB Packet Storm

224976	7.5	HIGH Network	siemens	ktk_ate530s_firmware sidoor_atd430w_firmware sidoor_ate530s_coated_firmware sidoor_ate531s_firmware simatic_et_200sp_open_controller_cpu_1515sp_pc_firmware simatic_et_200sp_open_contro…	A vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200, Development/Evaluation Kits for PROFINET IO: EK-ERTEC 200P, KTK ATE530S, SIDOOR ATD430W, SIDOOR ATE53…	-	CVE-2019-19300	2024-11-21 13:34	2020-04-15	Show	GitHub Exploit DB Packet Storm

224977	7.0	HIGH Local	redhat	openshift	An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/apb-base, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4. An attacke…	CWE-269 Improper Privilege Management	CVE-2019-19348	2024-11-21 13:34	2020-04-3	Show	GitHub Exploit DB Packet Storm

224978	7.0	HIGH Local	redhat	openshift	An insecure modification vulnerability in the /etc/passwd file was found in the container openshift/mariadb-apb, affecting versions before the following 4.3.5, 4.2.21, 4.1.37, and 3.11.188-4 . An att…	CWE-269 Improper Privilege Management	CVE-2019-19346	2024-11-21 13:34	2020-04-3	Show	GitHub Exploit DB Packet Storm

224979	7.5	HIGH Network	hitachienergy	esoms	ABB eSOMS versions 4.0 to 6.0.3 accept connections using medium strength ciphers. If a connection is enabled using such a cipher, an attacker might be able to eavesdrop and/or intercept the connectio…	CWE-326 Inadequate Encryption Strength	CVE-2019-19097	2024-11-21 13:34	2020-04-3	Show	GitHub Exploit DB Packet Storm

224980	6.1	MEDIUM Local	hitachienergy	esoms	The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' co…	CWE-522 Insufficiently Protected Credentials	CVE-2019-19096	2024-11-21 13:34	2020-04-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed