Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252621	7.5	危険	NetArt Media	-	NetArt Media iBoutique における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5020	2011-12-9 13:56	2011-11-2	Show	GitHub Exploit DB Packet Storm

252622	7.5	危険	Cramer Development	-	Digital Interchange Document Library における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5021	2011-12-9 13:56	2011-11-2	Show	GitHub Exploit DB Packet Storm

252623	7.5	危険	Jextensions	-	Joomla! 用 JExtensions JE Story Submit コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5022	2011-12-9 13:55	2011-11-2	Show	GitHub Exploit DB Packet Storm

252624	7.5	危険	Cramer Development	-	Digital Interchange Calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5023	2011-12-9 13:54	2011-11-2	Show	GitHub Exploit DB Packet Storm

252625	6	警告	CuteSITE	-	CuteSITE CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5024	2011-12-9 13:54	2011-11-2	Show	GitHub Exploit DB Packet Storm

252626	4.3	警告	CuteSITE	-	CuteSITE CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5025	2011-12-9 13:50	2011-11-2	Show	GitHub Exploit DB Packet Storm

252627	6.8	警告	Lightbox Technologies Inc.	-	Science Fair In A Box における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5026	2011-12-9 13:50	2011-11-2	Show	GitHub Exploit DB Packet Storm

252628	4.3	警告	Lightbox Technologies Inc.	-	Science Fair In A Box におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5027	2011-12-9 13:49	2011-11-2	Show	GitHub Exploit DB Packet Storm

252629	7.5	危険	Jextensions	-	Joomla! 用 JExtensions JE Job のコンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5028	2011-12-9 13:48	2011-11-2	Show	GitHub Exploit DB Packet Storm

252630	7.5	危険	codefabrik gmbh	-	Ecomat CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5029	2011-12-9 13:47	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225071	7.5	HIGH Network	freerdp opensuse	freerdp leap	libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x through 2.0.0-rc4 has memory leaks because a supplied realloc pointer (i.e., the first argument to realloc) is also used for a realloc retur…	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2019-17177	2024-11-21 13:31	2019-10-5	Show	GitHub Exploit DB Packet Storm

225072	7.5	HIGH Network	joyplus-cms_project	joyplus-cms	joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.	CWE-22 Path Traversal	CVE-2019-17175	2024-11-21 13:31	2019-10-5	Show	GitHub Exploit DB Packet Storm

225073	9.8	CRITICAL Network	liferay	liferay_portal	Liferay Portal CE 6.2.5 allows remote command execution because of deserialization of a JSON payload.	CWE-502 Deserialization of Untrusted Data	CVE-2019-16891	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225074	9.8	CRITICAL Network	linux debian canonical opensuse	linux_kernel debian_linux ubuntu_linux leap	In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.	CWE-120 Classic Buffer Overflow	CVE-2019-17133	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225075	9.8	CRITICAL Network	vbulletin	vbulletin	vBulletin through 5.5.4 mishandles custom avatars.	CWE-94 CWE-20 Code Injection Improper Input Validation	CVE-2019-17132	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225076	4.3	MEDIUM Network	vbulletin	vbulletin	vBulletin before 5.5.4 allows clickjacking.	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2019-17131	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225077	6.5	MEDIUM Network	vbulletin	vbulletin	vBulletin through 5.5.4 mishandles external URLs within the /core/vb/vurl.php file and the /core/vb/vurl directories.	CWE-552 Files or Directories Accessible to External Parties	CVE-2019-17130	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225078	5.4	MEDIUM Network	vanderbilt	redcap	REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values.	CWE-79 Cross-site Scripting	CVE-2019-17121	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225079	9.8	CRITICAL Network	openmpt	libopenmpt	In libopenmpt before 0.3.19 and 0.4.x before 0.4.9, ModPlug_InstrumentName and ModPlug_SampleName in libopenmpt_modplug.c do not restrict the lengths of libmodplug output-buffer strings in the C API,…	CWE-120 Classic Buffer Overflow	CVE-2019-17113	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm

225080	6.1	MEDIUM Network	themeisle	visualizer	A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via t…	CWE-79 Cross-site Scripting	CVE-2019-16931	2024-11-21 13:31	2019-10-4	Show	GitHub Exploit DB Packet Storm