Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254191 5 警告 ModSecurity - ModSecurity モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2008-5676 2011-06-7 10:08 2010-08-1 Show GitHub Exploit DB Packet Storm
254192 7.5 危険 Ecava - Ecava IntegraXor HMI における認証を回避される脆弱性 CWE-89
SQLインジェクション
CVE-2011-1562 2011-06-6 14:47 2011-04-5 Show GitHub Exploit DB Packet Storm
254193 6.8 警告 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi における絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4731 2011-06-6 14:46 2011-02-15 Show GitHub Exploit DB Packet Storm
254194 9 危険 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-4732 2011-06-6 14:44 2011-02-15 Show GitHub Exploit DB Packet Storm
254195 6.8 警告 IntelliCom Innovation AB - 複数の IntelliCom 製品の cgi-bin/read.cgi におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-4730 2011-06-6 14:34 2011-02-15 Show GitHub Exploit DB Packet Storm
254196 7.8 危険 Imperva Inc. - Imperva SecureSphere の Web Application Firewall および Database Firewall における intrusion-prevention 機能を回避される脆弱性 CWE-noinfo
情報不足
CVE-2010-1329 2011-06-6 14:29 2010-04-5 Show GitHub Exploit DB Packet Storm
254197 4.3 警告 Imperva Inc. - Imperva SecureSphere MX Management Server の management GUI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-1463 2011-06-6 14:27 2008-03-18 Show GitHub Exploit DB Packet Storm
254198 6.5 警告 バラクーダネットワークス - Barracuda Spam Firewall の Account View ページ内にある index.cgi における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2008-1094 2011-06-6 14:23 2008-12-15 Show GitHub Exploit DB Packet Storm
254199 3.5 注意 バラクーダネットワークス - 複数の Barracuda 製品の index.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-0971 2011-06-6 14:21 2008-12-15 Show GitHub Exploit DB Packet Storm
254200 4.3 警告 バラクーダネットワークス - Barracuda Spam Firewall の ldap_test.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2008-2333 2011-06-6 14:20 2008-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
225381 8.8 HIGH
Network
enterprisedt completeftp_server CompleteFTPService.exe in the server in EnterpriseDT CompleteFTP before 12.1.4 allows Remote Code Execution by leveraging a Windows user account that has SSH access. The exec command is always run as… CWE-77
Command Injection
CVE-2019-16864 2024-11-21 13:31 2022-02-15 Show GitHub Exploit DB Packet Storm
225382 5.4 MEDIUM
Network
solarwinds web_help_desk SolarWinds Web Help Desk 12.7.0 allows XSS via a Schedule Name. CWE-79
Cross-site Scripting
CVE-2019-16961 2024-11-21 13:31 2021-01-15 Show GitHub Exploit DB Packet Storm
225383 5.4 MEDIUM
Network
zohocorp manageengine_desktop_central Zoho ManageEngine Desktop Central 10.0.430 allows HTML injection via a modified Report Name in a New Custom Report. CWE-79
Cross-site Scripting
CVE-2019-16962 2024-11-21 13:31 2021-01-7 Show GitHub Exploit DB Packet Storm
225384 5.4 MEDIUM
Network
solarwinds web_help_desk SolarWinds Web Help Desk 12.7.0 allows HTML injection via a Comment in a Help Request ticket. CWE-79
Cross-site Scripting
CVE-2019-16954 2024-11-21 13:31 2021-01-7 Show GitHub Exploit DB Packet Storm
225385 5.4 MEDIUM
Network
solarwinds web_help_desk SolarWinds Web Help Desk 12.7.0 allows XSS via a CSV template file with a crafted Location Name field. CWE-79
Cross-site Scripting
CVE-2019-16960 2024-11-21 13:31 2021-01-4 Show GitHub Exploit DB Packet Storm
225386 5.4 MEDIUM
Network
solarwinds web_help_desk SolarWinds Web Help Desk 12.7.0 allows XSS via the Request Type parameter of a ticket. CWE-79
Cross-site Scripting
CVE-2019-16956 2024-11-21 13:31 2021-01-4 Show GitHub Exploit DB Packet Storm
225387 7.5 HIGH
Network
matrixssl matrixssl In MatrixSSL before 4.2.2 Open, the DTLS server can encounter an invalid pointer free (leading to memory corruption and a daemon crash) via a crafted incoming network message, a different vulnerabili… CWE-787
 Out-of-bounds Write
CVE-2019-16747 2024-11-21 13:31 2020-12-31 Show GitHub Exploit DB Packet Storm
225388 6.5 MEDIUM
Network
solarwinds webhelpdesk SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2019-16959 2024-11-21 13:31 2020-12-22 Show GitHub Exploit DB Packet Storm
225389 5.4 MEDIUM
Network
solarwinds webhelpdesk SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account. CWE-79
Cross-site Scripting
CVE-2019-16957 2024-11-21 13:31 2020-12-18 Show GitHub Exploit DB Packet Storm
225390 5.4 MEDIUM
Network
solarwinds webhelpdesk SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request. CWE-79
Cross-site Scripting
CVE-2019-16955 2024-11-21 13:31 2020-12-18 Show GitHub Exploit DB Packet Storm