Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226171 7.5 危険 xinha
s9y		 - Serendipity で使用されている Xinha WYSIWYG エディタにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-1916 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
226172 4.3 警告 tufat - FlashCard の cPlayer.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1872 2012-12-20 19:29 2010-05-12 Show GitHub Exploit DB Packet Storm
226173 6.8 警告 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform で使用されている jboss-seam2 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1871 2012-12-20 19:29 2010-07-27 Show GitHub Exploit DB Packet Storm
226174 6.8 警告 realitymedias - RepairShop2 の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1857 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
226175 2.6 注意 realitymedias - RepairShop2 の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1856 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
226176 7.5 危険 phpscripte24 - Pay Per Watch & Bid Auktions System の auktion.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1855 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
226177 4.3 警告 phpscripte24 - Pay Per Watch & Bid Auktions System の auktion.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1854 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
226178 6.8 警告 Transmission Project - Transmission の libtransmission/magnet.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1853 2012-12-20 19:29 2010-05-7 Show GitHub Exploit DB Packet Storm
226179 7.5 危険 Webkit - Qt などの製品で使用されている WebKit の websockets/WebSocketHandshake.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-1766 2012-12-20 19:29 2010-03-22 Show GitHub Exploit DB Packet Storm
226180 4.3 警告 toolsjx - Joomla! 用の Table JX コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1746 2012-12-20 19:29 2010-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
347071 - phorum phorum Phorum 3.3.2 allows remote attackers to determine the email addresses of the 10 most active users via a direct HTTP request to the stats.php program, which does not require authentication. NVD-CWE-Other
CVE-2002-0352 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347072 - mozilla
netscape 		mozilla
navigator 		The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the brows… NVD-CWE-Other
CVE-2002-0354 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347073 - sgi irix xfsmd for IRIX 6.5 through 6.5.16 uses weak authentication, which allows remote attackers to call dangerous RPC functions, including those that can mount or unmount xfs file systems, to gain root pri… NVD-CWE-Other
CVE-2002-0359 2016-10-18 11:19 2002-07-3 Show GitHub Exploit DB Packet Storm
347074 - sun solaris_answerbook2 Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program. NVD-CWE-Other
CVE-2002-0360 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347075 - aol instant_messenger Buffer overflow in AOL Instant Messenger (AIM) 4.2 and later allows remote attackers to execute arbitrary code via a long AddExternalApp request and a TLV type greater than 0x2711. NVD-CWE-Other
CVE-2002-0362 2016-10-18 11:19 2002-05-29 Show GitHub Exploit DB Packet Storm
347076 - padl_software pam_ldap Format string vulnerability in the logging function for the pam_ldap PAM LDAP module before version 144 allows attackers to execute arbitrary code via format strings in the configuration file name. NVD-CWE-Other
CVE-2002-0374 2016-10-18 11:19 2002-05-29 Show GitHub Exploit DB Packet Storm
347077 - rob_flynn gaim Gaim 0.57 stores sensitive information in world-readable and group-writable files in the /tmp directory, which allows local users to access MSN web email accounts of other users who run Gaim by readi… NVD-CWE-Other
CVE-2002-0377 2016-10-18 11:19 2002-05-29 Show GitHub Exploit DB Packet Storm
347078 - lbl tcpdump Buffer overflow in tcpdump 3.6.2 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via an NFS packet. NVD-CWE-Other
CVE-2002-0380 2016-10-18 11:19 2002-06-18 Show GitHub Exploit DB Packet Storm
347079 - xchat xchat XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS reverse lookup contains shell metacharacters. NVD-CWE-Other
CVE-2002-0382 2016-10-18 11:19 2002-06-25 Show GitHub Exploit DB Packet Storm
347080 - opera_software opera_web_browser Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote attac… CWE-79
Cross-site Scripting 		CVE-2002-0270 2016-10-18 11:18 2002-05-29 Show GitHub Exploit DB Packet Storm