Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255271 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3686 2010-10-7 16:40 2010-08-11 Show GitHub Exploit DB Packet Storm
255272 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3685 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
255273 5 警告 Drupal
サイバートラスト株式会社		 - Drupal の OpenID モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2010-3091 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
255274 2.1 注意 Drupal
サイバートラスト株式会社		 - Drupal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3094 2010-10-7 16:39 2010-08-11 Show GitHub Exploit DB Packet Storm
255275 3.5 注意 Drupal
サイバートラスト株式会社		 - Drupal の comment モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3093 2010-10-7 16:38 2010-08-11 Show GitHub Exploit DB Packet Storm
255276 5.5 警告 Drupal
サイバートラスト株式会社		 - Drupal の upload モジュールにおけるファイルのダウンロード制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3092 2010-10-7 16:37 2010-08-11 Show GitHub Exploit DB Packet Storm
255277 9.3 危険 アップル - Apple QuickTime の IPersistPropertyBag2::Read における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-1818 2010-10-6 16:57 2010-08-31 Show GitHub Exploit DB Packet Storm
255278 9.3 危険 IBM - IBM Lotus Domino サーバの MailCheck821Address 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-3407 2010-10-6 16:57 2010-09-16 Show GitHub Exploit DB Packet Storm
255279 6.8 警告 マイクロソフト - Microsoft Outlook Web Access におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3213 2010-10-6 16:56 2010-09-7 Show GitHub Exploit DB Packet Storm
255280 6.9 警告 マイクロソフト - Microsoft Windows の Win32 サブシステム内にある CSRSS における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1891 2010-10-6 16:56 2010-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
221281 4.3 MEDIUM
Network 		ethex ethex_contracts A vulnerability was found in Ethex Contracts. It has been classified as critical. This affects an unknown part of the file EthexJackpot.sol of the component Monthly Jackpot Handler. The manipulation … - CVE-2019-25157 2024-11-21 13:39 2023-12-19 Show GitHub Exploit DB Packet Storm
221282 6.1 MEDIUM
Network 		dstar2018 agency A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument Q… - CVE-2019-25156 2024-11-21 13:39 2023-11-7 Show GitHub Exploit DB Packet Storm
221283 6.1 MEDIUM
Network 		cure53 dompurify DOMPurify before 1.0.11 allows reverse tabnabbing in demos/hooks-target-blank-demo.html because links lack a 'rel="noopener noreferrer"' attribute. CWE-601
Open Redirect 		CVE-2019-25155 2024-11-21 13:39 2023-11-7 Show GitHub Exploit DB Packet Storm
221284 10.0 CRITICAL
Network 		mozilla firefox A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape. This vulnerability affects Firefox < 70. NVD-CWE-noinfo
CVE-2019-25136 2024-11-21 13:39 2023-06-19 Show GitHub Exploit DB Packet Storm
221285 7.2 HIGH
Network 		umbraco umbraco_cms Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remote Code Execution by authenticated administrators via msxsl:script in an xsltSelection to developer/Xslt/xsltVisualize.aspx. CWE-91
Blind XPath Injection 		CVE-2019-25137 2024-11-21 13:39 2023-05-18 Show GitHub Exploit DB Packet Storm
221286 6.1 MEDIUM
Network 		dro.pm_project dro.pm A vulnerability, which was classified as problematic, was found in dro.pm. This affects an unknown part of the file web/fileman.php. The manipulation of the argument secret/key leads to cross site sc… CWE-79
Cross-site Scripting 		CVE-2019-25105 2024-11-21 13:39 2023-02-26 Show GitHub Exploit DB Packet Storm
221287 7.5 HIGH
Network 		rtcwcoop rtcwcoop A vulnerability has been found in rtcwcoop 1.0.2 and classified as problematic. Affected by this vulnerability is the function AICast_ScriptLoad of the file code/game/ai_cast_script.c of the componen… CWE-404
 Improper Resource Shutdown or Release 		CVE-2019-25104 2024-11-21 13:39 2023-02-21 Show GitHub Exploit DB Packet Storm
221288 7.5 HIGH
Network 		khanacademy simple-markdown A vulnerability has been found in simple-markdown 0.5.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file simple-markdown.js. The manipulation lead… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2019-25103 2024-11-21 13:39 2023-02-13 Show GitHub Exploit DB Packet Storm
221289 7.5 HIGH
Network 		khanacademy simple-markdown A vulnerability, which was classified as problematic, was found in simple-markdown 0.6.0. Affected is an unknown function of the file simple-markdown.js. The manipulation with the input <<<<<<<<<<:/:… CWE-1333
 Inefficient Regular Expression Complexity 		CVE-2019-25102 2024-11-21 13:39 2023-02-12 Show GitHub Exploit DB Packet Storm
221290 9.8 CRITICAL
Network 		turbogears_project turbogears A vulnerability classified as critical has been found in OnShift TurboGears 1.0.11.10. This affects an unknown part of the file turbogears/controllers.py of the component HTTP Header Handler. The man… CWE-436
 Interpretation Conflict 		CVE-2019-25101 2024-11-21 13:39 2023-02-4 Show GitHub Exploit DB Packet Storm