Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
255741	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet における任意のコードを実行される脆弱性	CWE-189 数値処理の問題	CVE-2010-1525	2010-08-24 18:41	2010-08-4	Show	GitHub Exploit DB Packet Storm

255742	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0133	2010-08-24 18:40	2010-08-4	Show	GitHub Exploit DB Packet Storm

255743	9.3	危険	シマンテック IBM	-	Lotus 1-2-3 reader (wkssr.dll) の SpreadSheet におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-0131	2010-08-24 18:40	2010-08-4	Show	GitHub Exploit DB Packet Storm

255744	4.3	警告	サイバートラスト株式会社 LibTIFF レッドハット	-	x86_64 プラットフォーム上で稼動する RHEL の LibTIFF におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2598	2010-08-24 13:44	2010-07-8	Show	GitHub Exploit DB Packet Storm

255745	6.8	警告	アップルサイバートラスト株式会社 LibTIFF レッドハット	-	LibTIFF の FAX3 デコーダの Fax3SetupState 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-1411	2010-08-24 13:44	2010-06-10	Show	GitHub Exploit DB Packet Storm

255746	2.6	注意	アップル	-	Apple Safari の AutoFill 機能におけるアドレスブックカードの情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-1796	2010-08-20 18:24	2010-07-30	Show	GitHub Exploit DB Packet Storm

255747	4.3	警告	アップル	-	Apple Safari におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-1778	2010-08-20 18:24	2010-07-30	Show	GitHub Exploit DB Packet Storm

255748	7.5	危険	金子勇	-	Winny におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2360	2010-08-20 12:02	2010-08-20	Show	GitHub Exploit DB Packet Storm

255749	7.5	危険	金子勇	-	Winny におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2360	2010-08-20 12:02	2010-08-20	Show	GitHub Exploit DB Packet Storm

255750	5	警告	金子勇	-	Winny におけるノード情報の処理に関する脆弱性	CWE-Other その他	CVE-2010-2362	2010-08-20 12:01	2010-08-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
225261	6.5	MEDIUM Network	phpok	oklite	An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring.	CWE-22 Path Traversal	CVE-2019-16132	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225262	8.8	HIGH Network	phpok	oklite	framework/admin/modulec_control.php in OKLite v1.2.25 has an Arbitrary File Upload Vulnerability because a .php file from a ZIP archive can be written to /data/cache/.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2019-16131	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225263	6.1	MEDIUM Network	hgw168cc	yii-cms	YII2-CMS v1.0 has XSS in protected\core\modules\home\models\Contact.php via a name field to /contact.html.	CWE-79 Cross-site Scripting	CVE-2019-16130	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225264	6.1	MEDIUM Network	getgrav	grav_cms	Grav through 1.6.15 allows (Stored) Cross-Site Scripting due to JavaScript execution in SVG images.	CWE-79 Cross-site Scripting	CVE-2019-16126	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225265	9.8	CRITICAL Network	jobberbase	jobberbase	In Jobberbase 2.0, the parameter category is not sanitized in public/page_subscribe.php, leading to /subscribe SQL injection.	CWE-89 SQL Injection	CVE-2019-16125	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225266	9.8	CRITICAL Network	youphptube	youphptube	In YouPHPTube 7.4, the file install/checkConfiguration.php has no access control, which leads to everyone being able to edit the configuration file, and insert malicious PHP code.	CWE-862 Missing Authorization	CVE-2019-16124	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225267	7.5	HIGH Network	kartatopia	piluscart	In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.	CWE-22 Path Traversal	CVE-2019-16123	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225268	8.8	HIGH Network	tri	event_tickets	CSV injection in the event-tickets (Event Tickets) plugin before 4.10.7.2 for WordPress exists via the "All Post> Ticketed > Attendees" Export Attendees feature.	CWE-1236 Improper Neutralization of Formula Elements in a CSV File	CVE-2019-16120	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225269	9.8	CRITICAL Network	10web	photo_gallery	SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.	CWE-89 SQL Injection	CVE-2019-16119	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

225270	6.1	MEDIUM Network	10web	photo_gallery	Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php.	CWE-79 Cross-site Scripting	CVE-2019-16118	2024-11-21 13:30	2019-09-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed