Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
253431	7.5	危険	NetArt Media	-	NetArt Media iBoutique における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5020	2011-12-9 13:56	2011-11-2	Show	GitHub Exploit DB Packet Storm

253432	7.5	危険	Cramer Development	-	Digital Interchange Document Library における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5021	2011-12-9 13:56	2011-11-2	Show	GitHub Exploit DB Packet Storm

253433	7.5	危険	Jextensions	-	Joomla! 用 JExtensions JE Story Submit コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5022	2011-12-9 13:55	2011-11-2	Show	GitHub Exploit DB Packet Storm

253434	7.5	危険	Cramer Development	-	Digital Interchange Calendar における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5023	2011-12-9 13:54	2011-11-2	Show	GitHub Exploit DB Packet Storm

253435	6	警告	CuteSITE	-	CuteSITE CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5024	2011-12-9 13:54	2011-11-2	Show	GitHub Exploit DB Packet Storm

253436	4.3	警告	CuteSITE	-	CuteSITE CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5025	2011-12-9 13:50	2011-11-2	Show	GitHub Exploit DB Packet Storm

253437	6.8	警告	Lightbox Technologies Inc.	-	Science Fair In A Box における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5026	2011-12-9 13:50	2011-11-2	Show	GitHub Exploit DB Packet Storm

253438	4.3	警告	Lightbox Technologies Inc.	-	Science Fair In A Box におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5027	2011-12-9 13:49	2011-11-2	Show	GitHub Exploit DB Packet Storm

253439	7.5	危険	Jextensions	-	Joomla! 用 JExtensions JE Job のコンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5028	2011-12-9 13:48	2011-11-2	Show	GitHub Exploit DB Packet Storm

253440	7.5	危険	codefabrik gmbh	-	Ecomat CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5029	2011-12-9 13:47	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220251	10.0	CRITICAL Network	citrix	application_delivery_management	Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control.	NVD-CWE-noinfo	CVE-2019-9548	2024-11-21 13:51	2019-06-6	Show	GitHub Exploit DB Packet Storm

220252	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions.	NVD-CWE-noinfo	CVE-2019-9485	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

220253	5.5	MEDIUM Local	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 3 of 5).	CWE-20 Improper Input Validation	CVE-2019-9221	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

220254	9.8	CRITICAL Network	gitlab	gitlab	An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control (issue 1 of 5).	NVD-CWE-noinfo	CVE-2019-9218	2024-11-21 13:51	2019-05-30	Show	GitHub Exploit DB Packet Storm

220255	7.5	HIGH Network	aware	knomi	The Face authentication component in Aware mobile liveness 2.2.1 sdk 2.2.0 for Knomi allows a Biometrical Liveness authentication bypass via parameter tampering of the /knomi/analyze security_level f…	NVD-CWE-noinfo	CVE-2019-9196	2024-11-21 13:51	2019-05-16	Show	GitHub Exploit DB Packet Storm

220256	9.8	CRITICAL Network	gracemedia_media_player_project	gracemedia_media_player	The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.	CWE-22 Path Traversal	CVE-2019-9618	2024-11-21 13:51	2019-05-14	Show	GitHub Exploit DB Packet Storm

220257	9.8	CRITICAL Network	printerlogic	print_management	The PrinterLogic Print Management software, versions up to and including 18.3.1.96, does not sanitize special characters allowing for remote unauthorized changes to configuration files. An unauthenti…	NVD-CWE-Other	CVE-2019-9505	2024-11-21 13:51	2019-05-9	Show	GitHub Exploit DB Packet Storm

220258	8.8	HIGH Network	strato telekom ionos	hidrive_desktop_client magentacloud 1\&1_online_storage	STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. This service establishes a NetNamedPipe endpo…	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2019-9486	2024-11-21 13:51	2019-05-1	Show	GitHub Exploit DB Packet Storm

220259	7.5	HIGH Network	zimbra	collaboration_server	Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3 allows SSRF via the ProxyServlet component.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-9621	2024-11-21 13:51	2019-05-1	Show	GitHub Exploit DB Packet Storm

220260	7.8	HIGH Local	datools	daviewindy	DaviewIndy 8.98.7 and earlier versions have a Integer overflow vulnerability, triggered when the user opens a malformed PDF file that is mishandled by Daview.exe. Attackers could exploit this and arb…	CWE-190 Integer Overflow or Wraparound	CVE-2019-9139	2024-11-21 13:51	2019-04-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed