Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
189631	5.4	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	定量的プロジェクト管理ツールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2173	2017-11-27 17:51	2017-05-19	Show	GitHub Exploit DB Packet Storm

189632	6.1	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	定量的プロジェクト管理ツールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2017-2174	2017-11-27 17:51	2017-05-19	Show	GitHub Exploit DB Packet Storm

189633	7.8	重要 Local	独立行政法人情報処理推進機構 (IPA)	-	定量的プロジェクト管理ツールのインストーラにおける任意の DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2017-2175	2017-11-27 17:51	2017-05-19	Show	GitHub Exploit DB Packet Storm

189634	5.3	警告 Local	株式会社マネーフォワードソースネクスト	-	Android アプリ「マネーフォワード」における任意の操作が実行可能な脆弱性	CWE-Other その他	CVE-2016-4838	2017-11-27 17:50	2016-09-20	Show	GitHub Exploit DB Packet Storm

189635	3.7	低 Network	奥一穂	-	H2O における書式指定文字列に関する脆弱性	CWE-134 書式文字列の問題	CVE-2016-4864	2017-11-27 17:20	2016-09-15	Show	GitHub Exploit DB Packet Storm

189636	6.3	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat において任意のコードが実行可能な脆弱性	CWE-20 不適切な入力確認	CVE-2017-2182	2017-11-27 17:19	2017-06-6	Show	GitHub Exploit DB Packet Storm

189637	6.3	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat において任意のコードが実行可能な脆弱性	CWE-20 不適切な入力確認	CVE-2017-2181	2017-11-27 17:19	2017-06-6	Show	GitHub Exploit DB Packet Storm

189638	4.3	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat における情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2017-2180	2017-11-27 17:19	2017-06-6	Show	GitHub Exploit DB Packet Storm

189639	6.3	警告 Network	独立行政法人情報処理推進機構 (IPA)	-	脆弱性体験学習ツール AppGoat において任意のコードが実行可能な脆弱性	CWE-20 不適切な入力確認	CVE-2017-2179	2017-11-27 17:19	2017-06-6	Show	GitHub Exploit DB Packet Storm

189640	6.3	警告 Network	日本情報化農業研究所	-	SOY CMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2017-2163	2017-11-27 17:19	2017-05-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
355401	-	xerox	workcentre_5632 workcentre_5638 workcentre_5645 workcentre_5655 workcentre_5665 workcentre_5675 workcentre_5687	Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unkno…	CWE-200 Information Exposure	CVE-2010-0548	2010-02-5 14:00	2010-02-5	Show	GitHub Exploit DB Packet Storm

355402	-	ircd-hybrid ircd-ratbox oftc	ircd-hybrid ircd-ratbox oftc-hybrid	Integer underflow in the clean_string function in irc_string.c in (1) IRCD-hybrid 7.2.2 and 7.2.3, (2) ircd-ratbox before 2.2.9, and (3) oftc-hybrid before 1.6.8, when flatten_links is disabled, allo…	CWE-189 Numeric Errors	CVE-2009-4016	2010-02-5 14:00	2010-02-5	Show	GitHub Exploit DB Packet Storm

355403	-	comtrend	ct-507it_adsl_router	Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter.	CWE-79 Cross-site Scripting	CVE-2010-0470	2010-02-3 14:00	2010-02-3	Show	GitHub Exploit DB Packet Storm

355404	-	viewvc	viewvc	query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access r…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0005	2010-02-2 14:00	2010-01-30	Show	GitHub Exploit DB Packet Storm

355405	-	mozilla	seamonkey thunderbird	Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other applications, performs DNS prefetching even when the app type is APP_TYPE_MAIL or APP_TYPE_EDITOR, which makes it easier for remote a…	CWE-200 Information Exposure	CVE-2009-4629	2010-02-2 14:00	2010-01-30	Show	GitHub Exploit DB Packet Storm

355406	-	cisco	unified_meetingplace	Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) a…	NVD-CWE-noinfo	CVE-2010-0140	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

355407	-	cisco	unified_meetingplace	Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml Affected Products Vulnerable Products Cisco Unified MeetingPlace versions 5, 6, and 7 are each affec…	NVD-CWE-noinfo	CVE-2010-0140	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

355408	-	cisco	unified_meetingplace	MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0142	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

355409	-	cisco	unified_meetingplace	Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml Affected Products Vulnerable Products Cisco Unified MeetingPlace versions 5, 6, and 7 are each affec…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-0142	2010-01-31 14:00	2010-01-29	Show	GitHub Exploit DB Packet Storm

355410	-	sun	java_system_application_server	The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credential…	CWE-16 Configuration	CVE-2010-0386	2010-01-31 14:00	2010-01-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed