Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254091 | 2.6 | 注意 | 富士通九州システムズ | - | e-Pares におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-2151 | 2010-06-2 15:04 | 2010-06-2 | Show | GitHub Exploit DB Packet Storm |
| 254092 | 4.3 | 警告 | 富士通九州システムズ | - | e-Pares におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-2150 | 2010-06-2 15:02 | 2010-06-2 | Show | GitHub Exploit DB Packet Storm |
| 254093 | 2.1 | 注意 | アドビシステムズ | - | Adobe ColdFusion における重要な情報を取得される脆弱性 |
CWE-200 CWE-noinfo |
CVE-2010-1294 | 2010-06-2 12:14 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 254094 | 4.3 | 警告 | アドビシステムズ | - | Adobe ColdFusion の Administrator ページにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-1293 | 2010-06-2 12:14 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 254095 | 4.3 | 警告 | アドビシステムズ | - | Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3467 | 2010-06-2 12:13 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 254096 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player の pami RIFF chunk 構文解析における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1292 | 2010-06-2 12:13 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 254097 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1291 | 2010-06-2 12:13 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 254098 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1290 | 2010-06-2 12:13 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
| 254099 | 9.3 | 危険 | ジャストシステム | - | 一太郎シリーズにおける任意のコードが実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-2152 | 2010-06-1 16:01 | 2010-06-1 | Show | GitHub Exploit DB Packet Storm |
| 254100 | 9.3 | 危険 | アドビシステムズ | - | Adobe Shockwave Player における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2010-1289 | 2010-06-1 15:45 | 2010-05-11 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 8, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222981 | 8.1 |
HIGH
Network |
pw3270_project | pw3270 | There is Missing SSL Certificate Validation in the pw3270 terminal emulator before version 5.1. |
CWE-295
Improper Certificate Validation |
CVE-2019-15525 | 2024-11-21 13:28 | 2019-08-24 | Show | GitHub Exploit DB Packet Storm |
| 222982 | 5.3 |
MEDIUM
Network |
comelz | quark | comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. |
CWE-22
Path Traversal |
CVE-2019-15520 | 2024-11-21 13:28 | 2019-08-24 | Show | GitHub Exploit DB Packet Storm |
| 222983 | 9.8 |
CRITICAL
Network |
power-response_project | power-response | Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. |
CWE-22
Path Traversal |
CVE-2019-15519 | 2024-11-21 13:28 | 2019-08-24 | Show | GitHub Exploit DB Packet Storm |
| 222984 | 5.3 |
MEDIUM
Network |
swoole | swoole | Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler. |
CWE-22
Path Traversal |
CVE-2019-15518 | 2024-11-21 13:28 | 2019-08-24 | Show | GitHub Exploit DB Packet Storm |
| 222985 | 5.5 |
MEDIUM
Local |
jc21 | nginx_proxy_manager | jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. |
CWE-22
Path Traversal |
CVE-2019-15517 | 2024-11-21 13:28 | 2019-08-24 | Show | GitHub Exploit DB Packet Storm |
| 222986 | 7.5 |
HIGH
Network |
cuberite | cuberite | Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. |
CWE-22
Path Traversal |
CVE-2019-15516 | 2024-11-21 13:28 | 2019-08-24 | Show | GitHub Exploit DB Packet Storm |
| 222987 | 5.3 |
MEDIUM
Network |
telegram | telegram | The Privacy > Phone Number feature in the Telegram app 5.10 for Android and iOS provides an incorrect indication that the access level is Nobody, because attackers can find these numbers via the Grou… |
NVD-CWE-noinfo
|
CVE-2019-15514 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 222988 | 9.8 |
CRITICAL
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. |
CWE-918
Server-Side Request Forgery (SSRF) |
CVE-2019-15494 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 222989 | 7.5 |
HIGH
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 allows deletion of files, aka RVID 4-445b21. |
NVD-CWE-noinfo
|
CVE-2019-15493 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |
| 222990 | 6.1 |
MEDIUM
Network |
it-novum | openitcockpit | openITCOCKPIT before 3.7.1 has reflected XSS, aka RVID 3-445b21. |
CWE-79
Cross-site Scripting |
CVE-2019-15492 | 2024-11-21 13:28 | 2019-08-23 | Show | GitHub Exploit DB Packet Storm |