Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253361	8.5	危険	シスコシステムズ	-	Cisco Unified Communications Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-1609	2011-12-1 10:40	2011-04-27	Show	GitHub Exploit DB Packet Storm

253362	6.5	警告	シスコシステムズ	-	Cisco Unified Communications Manager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-1607	2011-12-1 10:40	2011-04-27	Show	GitHub Exploit DB Packet Storm

253363	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1606	2011-12-1 10:38	2011-04-27	Show	GitHub Exploit DB Packet Storm

253364	7.8	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (プロセス障害) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1605	2011-12-1 10:36	2011-04-27	Show	GitHub Exploit DB Packet Storm

253365	7.1	危険	シスコシステムズ	-	Cisco Unified Communications Manager におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2011-1604	2011-12-1 10:35	2011-04-27	Show	GitHub Exploit DB Packet Storm

253366	4.3	警告	John Godley	-	WordPress 用 Redirection プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4562	2011-11-30 16:50	2011-11-28	Show	GitHub Exploit DB Packet Storm

253367	4.3	警告	codefuture	-	CF Image Hosting Script におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4572	2011-11-30 16:38	2011-11-29	Show	GitHub Exploit DB Packet Storm

253368	7.5	危険	EA Improved	-	Estate Agent コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4571	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

253369	7.5	危険	Takeaweb	-	Time Returns コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4570	2011-11-30 16:37	2011-11-29	Show	GitHub Exploit DB Packet Storm

253370	7.5	危険	tommykent1210	-	MyBB Forum 用 Userbar プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2011-4569	2011-11-30 16:36	2011-11-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220051	6.5	MEDIUM Network	pluck-cms	pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete modules via a /admin.php?action=module_delete&var1= URI.	CWE-352 Origin Validation Error	CVE-2019-9049	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

220052	6.5	MEDIUM Network	pluck-cms	pluck	An issue was discovered in Pluck 4.7.9-dev1. There is a CSRF vulnerability that can delete a theme (aka topic) via a /admin.php?action=theme_delete&var1= URI.	CWE-352 Origin Validation Error	CVE-2019-9048	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

220053	7.2	HIGH Network	sitemagic	sitemagic_cms	An issue was discovered in Sitemagic CMS v4.4. In the index.php?SMExt=SMFiles URI, the user can upload a .php file to execute arbitrary code, as demonstrated by 404.php. This can only occur if the ad…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-9042	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

220054	7.2	HIGH Network	zzzcms	zzzphp	An issue was discovered in ZZZCMS zzzphp V1.6.1. In the inc/zzz_template.php file, the parserIfLabel() function's filtering is not strict, resulting in PHP code execution, as demonstrated by the if:a…	CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')	CVE-2019-9041	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

220055	8.8	HIGH Network	s-cms	s-cms	S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin&action=add URI, a related issue to CVE-2018-19332.	CWE-352 Origin Validation Error	CVE-2019-9040	2024-11-21 13:50	2019-02-24	Show	GitHub Exploit DB Packet Storm

220056	7.5	HIGH Network	matio_project	matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is an out-of-bounds read problem with a SEGV in the function ReadNextCell() in mat5.c.	CWE-125 Out-of-bounds Read	CVE-2019-9038	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

220057	9.1	CRITICAL Network	matio_project	matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a buffer over-read in the function Mat_VarPrint() in mat.c.	CWE-125 Out-of-bounds Read	CVE-2019-9037	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

220058	7.5	HIGH Network	matio_project	matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a heap-based buffer overflow in the function ReadNextFunctionHandle() in mat5.c.	CWE-787 Out-of-bounds Write	CVE-2019-9036	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

220059	9.1	CRITICAL Network	matio_project	matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read in the function ReadNextStructField() in mat5.c.	CWE-125 Out-of-bounds Read	CVE-2019-9035	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

220060	9.1	CRITICAL Network	matio_project	matio	An issue was discovered in libmatio.a in matio (aka MAT File I/O Library) 1.5.13. There is a stack-based buffer over-read for a memcpy in the function ReadNextCell() in mat5.c.	CWE-125 Out-of-bounds Read	CVE-2019-9034	2024-11-21 13:50	2019-02-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed