Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253151	7.5	危険	CMScout	-	CMScout の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5059	2011-11-25 11:48	2011-11-23	Show	GitHub Exploit DB Packet Storm

253152	7.5	危険	GBU grafici	-	GBU Facebook コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5056	2011-11-25 11:47	2011-11-23	Show	GitHub Exploit DB Packet Storm

253153	7.5	危険	Almnzm	-	Almnzm の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5055	2011-11-25 11:46	2011-11-23	Show	GitHub Exploit DB Packet Storm

253154	4.3	警告	JAMWiki	-	JAMWiki の Special:Login におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5054	2011-11-25 11:46	2010-04-1	Show	GitHub Exploit DB Packet Storm

253155	4.3	警告	The GetSimple Team	-	GetSimple CMS の admin/components.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5052	2011-11-25 11:45	2011-11-23	Show	GitHub Exploit DB Packet Storm

253156	4.3	警告	razorCMS	-	razorCMS の admin/core/admin_func.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5051	2011-11-25 11:44	2011-11-23	Show	GitHub Exploit DB Packet Storm

253157	4.3	警告	Zoho Corporation	-	ManageEngine ADManager Plus におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5050	2011-11-25 11:43	2011-11-23	Show	GitHub Exploit DB Packet Storm

253158	7.5	危険	Zabbix	-	Zabbix の events.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5049	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

253159	4.3	警告	JoomlaTune Joomla!	-	JoomlaTune JComments におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5048	2011-11-25 11:42	2011-11-23	Show	GitHub Exploit DB Packet Storm

253160	7.5	危険	V-EVA	-	V-EVA Press Release Script における任意の SQL コマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2010-5047	2011-11-25 11:41	2011-11-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225521	4.8	MEDIUM Network	serpico_project	serpico	An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/add_user/UID allows stored XSS via the author parameter.	CWE-79 Cross-site Scripting	CVE-2019-19858	2024-11-21 13:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

225522	6.5	MEDIUM Network	serpico_project	serpico	An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. An admin can change their password without providing the current password, by using interfaces outside the…	CWE-287 Improper Authentication	CVE-2019-19857	2024-11-21 13:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

225523	4.8	MEDIUM Network	serpico_project	serpico	An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. The User Type on the admin/list_user page allows stored XSS via the type parameter.	CWE-79 Cross-site Scripting	CVE-2019-19856	2024-11-21 13:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

225524	4.8	MEDIUM Network	serpico_project	serpico	An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. admin/list_user allows stored XSS via the auth_type parameter.	CWE-79 Cross-site Scripting	CVE-2019-19855	2024-11-21 13:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

225525	8.8	HIGH Network	serpico_project	serpico	An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0. It does not use CSRF Tokens to mitigate against CSRF; it uses the Origin header (which must match the requ…	CWE-352 Origin Validation Error	CVE-2019-19854	2024-11-21 13:35	2020-01-16	Show	GitHub Exploit DB Packet Storm

225526	8.8	HIGH Network	proofpoint	enterprise_protection	A file-extension filtering vulnerability in Proofpoint Enterprise Protection (PPS / PoD), in the unpatched versions of PPS through 8.9.22 and 8.14.2 respectively, allows attackers to bypass protectio…	NVD-CWE-Other	CVE-2019-19680	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225527	7.5	HIGH Network	schedmd opensuse debian	slurm leap debian_linux	SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.	CWE-269 Improper Privilege Management	CVE-2019-19728	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225528	5.5	MEDIUM Local	schedmd opensuse	slurm leap	SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2019-19727	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225529	5.9	MEDIUM Network	mitel	sip-dect_firmware	An encryption key vulnerability on Mitel SIP-DECT wireless devices 8.0 and 8.1 could allow an attacker to launch a man-in-the-middle attack. A successful exploit may allow the attacker to intercept s…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-19891	2024-11-21 13:35	2020-01-14	Show	GitHub Exploit DB Packet Storm

225530	5.5	MEDIUM Local	gonitro	nitropdf	The JBIG2Globals library in npdf.dll in Nitro Free PDF Reader 12.0.0.112 has a CAPPDAnnotHandlerUtils::PDAnnotHandlerDestroyData2+0x90ec NULL Pointer Dereference via crafted Unicode content.	CWE-476 NULL Pointer Dereference	CVE-2019-19819	2024-11-21 13:35	2020-01-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed