Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
223581	2.1	注意	RivetCode Software	-	RivetTracker におけるパスワードを特定される脆弱性	CWE-310 暗号の問題	CVE-2008-7207	2012-12-20 19:10	2009-09-11	Show	GitHub Exploit DB Packet Storm

223582	4.3	警告	stefan ritt	-	ELOG における脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-7206	2012-12-20 19:10	2009-09-11	Show	GitHub Exploit DB Packet Storm

223583	4.3	警告	VirtueMart	-	VirtueMart の製品ビュー機能における任意のファイルを読み取られる脆弱性	CWE-20 不適切な入力確認	CVE-2008-7205	2012-12-20 19:10	2009-09-11	Show	GitHub Exploit DB Packet Storm

223584	6.8	警告	VirtueMart	-	VirtueMart におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-7204	2012-12-20 19:10	2009-09-11	Show	GitHub Exploit DB Packet Storm

223585	5	警告	valve software	-	Valve Software Half-Life Counter-Strike におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2008-7203	2012-12-20 19:10	2009-09-11	Show	GitHub Exploit DB Packet Storm

223586	6.8	警告	PHPKIT	-	PHPKIT におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-7193	2012-12-20 19:10	2009-09-9	Show	GitHub Exploit DB Packet Storm

223587	6.8	警告	woltlab	-	wBB の index.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2008-7192	2012-12-20 19:10	2009-09-9	Show	GitHub Exploit DB Packet Storm

223588	5	警告	pps.jussieu	-	Polipo におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2008-7191	2012-12-20 19:10	2009-09-9	Show	GitHub Exploit DB Packet Storm

223589	5	警告	rittwick banerjee	-	Telephone Directory 2008 の del_query1.php における任意の連絡先を削除される脆弱性	CWE-20 不適切な入力確認	CVE-2008-7180	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

223590	7.5	危険	XOOPS	-	XOOPS 用の Uploader モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-7178	2012-12-20 19:10	2009-09-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
278001	-	microsoft	xml_core_services	Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer over…	CWE-190 CWE-119 Integer Overflow or Wraparound Incorrect Access of Indexable Resource ('Range Error')	CVE-2007-2223	2019-02-28 01:00	2007-08-15	Show	GitHub Exploit DB Packet Storm

278002	-	microsoft	internet_explorer	Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related …	CWE-399 Resource Management Errors	CVE-2009-0075	2019-02-27 23:07	2009-02-11	Show	GitHub Exploit DB Packet Storm

278003	-	microsoft	windows_2000 windows_server_2003 windows_xp	The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle atta…	CWE-20 Improper Input Validation	CVE-2010-0016	2019-02-26 23:04	2010-02-11	Show	GitHub Exploit DB Packet Storm

278004	-	microsoft	windows_2000 windows_server_2003 windows_xp	Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka "MS Paint Integer Ov…	CWE-189 Numeric Errors	CVE-2010-0028	2019-02-26 23:04	2010-02-11	Show	GitHub Exploit DB Packet Storm

278005	-	microsoft	windows_2000 windows_xp windows_2003_server windows_server_2003 windows_vista	The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a…	CWE-20 Improper Input Validation	CVE-2010-0235	2019-02-26 23:04	2010-04-15	Show	GitHub Exploit DB Packet Storm

278006	-	microsoft	windows_2000 windows_xp windows_2003_server windows_server_2003 windows_vista	The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which…	CWE-399 Resource Management Errors	CVE-2010-0236	2019-02-26 23:04	2010-04-15	Show	GitHub Exploit DB Packet Storm

278007	-	microsoft	windows_2000 windows_xp windows_2003_server windows_server_2003 windows_vista	Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (rebo…	NVD-CWE-noinfo CWE-20 Improper Input Validation	CVE-2010-0238	2019-02-26 23:04	2010-04-15	Show	GitHub Exploit DB Packet Storm

278008	-	microsoft	windows_2000 windows_2003_server windows_server_2003 windows_xp	vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute ar…	CWE-94 Code Injection	CVE-2010-0483	2019-02-26 23:04	2010-03-4	Show	GitHub Exploit DB Packet Storm

278009	-	microsoft	windows_2000 windows_2003_server windows_server_2003 windows_xp	Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote attackers to execute arbit…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-0917	2019-02-26 23:04	2010-03-4	Show	GitHub Exploit DB Packet Storm

278010	-	microsoft	windows_2003_server windows_server_2003 windows_xp	The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote a…	CWE-78 OS Command	CVE-2010-1885	2019-02-26 23:04	2010-06-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed