Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204001 8.1 重要
Network
Apache Software Foundation - Apache Shiro における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-4437 2016-06-10 14:00 2016-06-3 Show GitHub Exploit DB Packet Storm
204002 5.3 警告
Network
OGNL project
Apache Software Foundation
- Apache Struts におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3093 2016-06-10 12:08 2016-06-2 Show GitHub Exploit DB Packet Storm
204003 9.8 緊急
Network
Apache Software Foundation - Apache Struts における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-3087 2016-06-10 12:08 2016-06-2 Show GitHub Exploit DB Packet Storm
204004 7.8 重要
Local
Debian
Doctrine Project
Zend Technologies Ltd.
- 複数の Doctrine 製品における追加の権限で任意の PHP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5723 2016-06-9 16:00 2015-08-31 Show GitHub Exploit DB Packet Storm
204005 5.9 警告
Network
Python Software Foundation - CPython の ssl.match_hostname 関数におけるサーバになりすまされる脆弱性 CWE-Other
その他
CVE-2013-7440 2016-06-9 14:50 2013-08-12 Show GitHub Exploit DB Packet Storm
204006 5.5 警告
Local
openSUSE project
CRIU
- CRIU のサービスデーモンにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-5231 2016-06-9 14:38 2015-08-25 Show GitHub Exploit DB Packet Storm
204007 7.8 重要
Local
openSUSE project
CRIU
- CRIU のサービスデーモンにおける任意のファイルを作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5228 2016-06-9 14:38 2015-08-25 Show GitHub Exploit DB Packet Storm
204008 7.5 重要
Network
Debian
FreeType Project
- FreeType の type42/t42parse.c の t42_parse_encoding 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-9747 2016-06-9 14:38 2014-01-23 Show GitHub Exploit DB Packet Storm
204009 8.1 重要
Network
Apache Software Foundation - Apache James Server における任意のシステムコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2015-7611 2016-06-9 12:30 2015-09-30 Show GitHub Exploit DB Packet Storm
204010 7.1 重要
Local
Debian
Canonical
Spice Project
レッドハット
- SPICE におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2015-5261 2016-06-9 12:06 2015-10-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349931 - matthias_kall mk_wastebasket SQL injection vulnerability in the MK Wastebasket (mk_wastebasket) extension 2.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-1010 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349932 - steffen_kamper reports_logview Cross-site scripting (XSS) vulnerability in the Reports Logfile View (reports_logview) extension 1.2.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspeci… CWE-79
Cross-site Scripting
CVE-2010-1014 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349933 - laurent_foulloy sav_filter_selectors SQL injection vulnerability in the SAV Filter Selectors (sav_filter_selectors) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-1016 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349934 - laurent_foulloy sav_filter_months SQL injection vulnerability in the SAV Filter Months (sav_filter_months) extension before 1.0.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-1017 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349935 - jochen_rau sk_bookreview SQL injection vulnerability in the Book Reviews (sk_bookreview) extension 0.0.12 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-1018 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349936 - sk-typo3 sk_simplegallery SQL injection vulnerability in the Simple Gallery (sk_simplegallery) extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2010-1019 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349937 - mads_brunn t3quixplorer Cross-site scripting (XSS) vulnerability in the Typo3 Quixplorer (t3quixplorer) extension before 1.7.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2010-1021 2010-03-22 13:00 2010-03-20 Show GitHub Exploit DB Packet Storm
349938 - gnome screensaver gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate … NVD-CWE-Other
CVE-2009-4642 2010-03-22 13:00 2010-02-12 Show GitHub Exploit DB Packet Storm
349939 - dmanager documentmanager Unspecified vulnerability in DocumentManager before 4.0 has unknown impact and attack vectors, related to file rights. NVD-CWE-noinfo
CVE-2010-0612 2010-03-18 13:00 2010-02-12 Show GitHub Exploit DB Packet Storm
349940 - citrix xenserver Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentication and execute unspecified Xen API (XAPI) calls via unknown vectors. NVD-CWE-noinfo
CVE-2010-0633 2010-03-18 13:00 2010-02-13 Show GitHub Exploit DB Packet Storm