Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
254311	7.5	危険	Jextensions	-	Joomla! 用 JExtensions JE Job のコンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5028	2011-12-9 13:48	2011-11-2	Show	GitHub Exploit DB Packet Storm

254312	7.5	危険	codefabrik gmbh	-	Ecomat CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5029	2011-12-9 13:47	2011-11-2	Show	GitHub Exploit DB Packet Storm

254313	4.3	警告	codefabrik gmbh	-	Ecomat CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5030	2011-12-9 13:46	2011-11-2	Show	GitHub Exploit DB Packet Storm

254314	4.3	警告	fileNice	-	fileNice の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5031	2011-12-9 13:45	2011-11-2	Show	GitHub Exploit DB Packet Storm

254315	7.5	危険	Tamlyn Creative Pty	-	Joomla! 用 BF Quiz コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5032	2011-12-9 13:45	2011-11-2	Show	GitHub Exploit DB Packet Storm

254316	7.5	危険	Fusebox	-	Fusebox の ProductList.cfm における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5033	2011-12-9 13:44	2011-11-2	Show	GitHub Exploit DB Packet Storm

254317	7.5	危険	iScripts	-	iScripts EasyBiller の viewhistorydetail.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5034	2011-12-9 13:43	2011-11-2	Show	GitHub Exploit DB Packet Storm

254318	4.3	警告	iScripts	-	iScripts eSwap の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5035	2011-12-9 13:42	2011-11-2	Show	GitHub Exploit DB Packet Storm

254319	7.5	危険	iScripts	-	iScripts eSwap の addsale.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5036	2011-12-9 13:42	2011-11-2	Show	GitHub Exploit DB Packet Storm

254320	7.5	危険	Michau Enterprises	-	SenseSites CommonSense CMS の article.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5037	2011-12-9 13:41	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
220981	9.8	CRITICAL Network	mozilla	thunderbird firefox_esr firefox	Mozilla developers and community members reported memory safety bugs present in Firefox 66, Firefox ESR 60.6, and Thunderbird 60.6. Some of these bugs showed evidence of memory corruption and we pres…	CWE-787 Out-of-bounds Write	CVE-2019-9800	2024-11-21 13:52	2019-07-23	Show	GitHub Exploit DB Packet Storm

220982	6.5	MEDIUM Network	freedesktop debian fedoraproject redhat	poppler debian_linux fedora enterprise_linux enterprise_linux_eus enterprise_linux_server_tus enterprise_linux_server_aus	The JPXStream::init function in Poppler 0.78.0 and earlier doesn't check for negative values of stream length, leading to an Integer Overflow, thereby making it possible to allocate a large memory ch…	CWE-190 Integer Overflow or Wraparound	CVE-2019-9959	2024-11-21 13:52	2019-07-23	Show	GitHub Exploit DB Packet Storm

220983	8.1	HIGH Network	mozilla	firefox firefox_esr thunderbird	If hyperthreading is not disabled, a timing attack vulnerability exists, similar to previous Spectre attacks. Apple has shipped macOS 10.14.5 with an option to disable hyperthreading in applications …	CWE-203 Information Exposure Through Discrepancy	CVE-2019-9815	2024-11-21 13:52	2019-07-23	Show	GitHub Exploit DB Packet Storm

220984	4.3	MEDIUM Network	libreoffice canonical fedoraproject debian opensuse	libreoffice ubuntu_linux fedora debian_linux leap	LibreOffice has a 'stealth mode' in which only documents from locations deemed 'trusted' are allowed to retrieve remote resources. This mode is not the default mode, but can be enabled by users who w…	NVD-CWE-noinfo	CVE-2019-9849	2024-11-21 13:52	2019-07-17	Show	GitHub Exploit DB Packet Storm

220985	9.8	CRITICAL Network	libreoffice canonical fedoraproject debian opensuse	libreoffice ubuntu_linux fedora debian_linux leap	LibreOffice has a feature where documents can specify that pre-installed scripts can be executed on various document events such as mouse-over, etc. LibreOffice is typically also bundled with LibreLo…	CWE-94 Code Injection	CVE-2019-9848	2024-11-21 13:52	2019-07-17	Show	GitHub Exploit DB Packet Storm

220986	3.9	LOW Physics	norton	password_manager	Norton Password Manager, prior to 6.3.0.2082, may be susceptible to an address spoofing issue. This type of issue may allow an attacker to disguise their origin IP address in order to obfuscate the s…	NVD-CWE-noinfo	CVE-2019-9700	2024-11-21 13:52	2019-07-17	Show	GitHub Exploit DB Packet Storm

220987	7.5	HIGH Network	eclass	eclass_ip	Any URLs with download_attachment.php under templates or home folders can allow arbitrary files downloaded without login in BroadLearning eClass before version ip.2.5.10.2.1.	CWE-22 Path Traversal	CVE-2019-9886	2024-11-21 13:52	2019-07-12	Show	GitHub Exploit DB Packet Storm

220988	7.8	HIGH Local	alarm	adc-v522ir_firmware	Alarm.com ADC-V522IR 0100b9 devices have Incorrect Access Control, a different issue than CVE-2018-19588. This occurs because of incorrect protection of VPN certificates (used for initiating a VPN se…	CWE-522 Insufficiently Protected Credentials	CVE-2019-9657	2024-11-21 13:52	2019-07-12	Show	GitHub Exploit DB Packet Storm

220989	7.5	HIGH Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager before 3.17.0 has a weak default of giving any unauthenticated user read permissions on the repository files and images.	CWE-276 Incorrect Default Permissions	CVE-2019-9630	2024-11-21 13:52	2019-07-9	Show	GitHub Exploit DB Packet Storm

220990	9.8	CRITICAL Network	sonatype	nexus_repository_manager	Sonatype Nexus Repository Manager before 3.17.0 establishes a default administrator user with weak defaults (fixed credentials).	CWE-287 Improper Authentication	CVE-2019-9629	2024-11-21 13:52	2019-07-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed