Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226771 10 危険 SAP - SAP MaxDB の serv.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1185 2012-12-20 19:29 2010-03-29 Show GitHub Exploit DB Packet Storm
226772 3.3 注意 サン・マイクロシステムズ - Oracle Solaris の特定の patch-installation スクリプトにおける任意のファイルへのデータを追加される脆弱性 CWE-59
リンク解釈の問題 		CVE-2010-1183 2012-12-20 19:29 2010-03-29 Show GitHub Exploit DB Packet Storm
226773 4.3 警告 phpmysite - phpMySite の contact.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1091 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
226774 7.5 危険 phpmysite - phpMySite の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1090 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
226775 7.5 危険 phptroubleticket - PHP Trouble Ticket の vedi_faq.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1089 2012-12-20 19:29 2010-03-24 Show GitHub Exploit DB Packet Storm
226776 4.3 警告 PulseCMS - Pulse CMS の view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1080 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
226777 4.3 警告 Sawmill - Sawmill におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1079 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
226778 7.5 危険 sphere.xlentprojects - XlentProjects SphereCMSSpey の archive.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2010-1078 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
226779 6.8 警告 VBSEO - vBulletin 用の Crawlability vBSEO プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-1077 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
226780 4.3 警告 sniggabo - Sniggabo CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1072 2012-12-20 19:29 2010-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274791 6.7 MEDIUM
Local 		lenovo fingerprint_manager Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalidate local checks and gain privileges via standard filesystem operations. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-3321 2024-11-21 11:29 2017-10-3 Show GitHub Exploit DB Packet Storm
274792 7.8 HIGH
Local 		usb-creator_project usb-creator usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-3643 2024-11-21 11:29 2017-09-28 Show GitHub Exploit DB Packet Storm
274793 6.1 MEDIUM
Network 		nodebb nodebb Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) javascript: or (2) data: URLs. CWE-79
Cross-site Scripting 		CVE-2015-3296 2024-11-21 11:29 2017-09-21 Show GitHub Exploit DB Packet Storm
274794 6.1 MEDIUM
Network 		pydio pydio Multiple cross-site scripting (XSS) vulnerabilities in Pydio (formerly AjaXplorer) before 6.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Pydio XSS V… CWE-79
Cross-site Scripting 		CVE-2015-3432 2024-11-21 11:29 2017-09-20 Show GitHub Exploit DB Packet Storm
274795 9.8 CRITICAL
Network 		pydio pydio Pydio (formerly AjaXplorer) before 6.0.7 allows remote attackers to execute arbitrary commands via unspecified vectors, aka "Pydio OS Command Injection Vulnerabilities." CWE-78
OS Command  		CVE-2015-3431 2024-11-21 11:29 2017-09-20 Show GitHub Exploit DB Packet Storm
274796 5.9 MEDIUM
Network 		dovecot
fedoraproject 		dovecot
fedora 		The ssl-proxy-openssl.c function in Dovecot before 2.2.17, when SSLv3 is disabled, allow remote attackers to cause a denial of service (login process crash) via vectors related to handshake failures. CWE-295
Improper Certificate Validation  		CVE-2015-3420 2024-11-21 11:29 2017-09-20 Show GitHub Exploit DB Packet Storm
274797 6.5 MEDIUM
Network 		vbulletin vbulletin vBulletin 5.x through 5.1.6 allows remote authenticated users to bypass authorization checks and inject private messages into conversations via vectors related to an input validation failure. CWE-20
 Improper Input Validation  		CVE-2015-3419 2024-11-21 11:29 2017-09-20 Show GitHub Exploit DB Packet Storm
274798 6.1 MEDIUM
Network 		floating_social_bar_project floating_social_bar Cross-site scripting (XSS) vulnerability in the Floating Social Bar plugin before 1.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to original se… CWE-79
Cross-site Scripting 		CVE-2015-3299 2024-11-21 11:29 2017-09-20 Show GitHub Exploit DB Packet Storm
274799 8.1 HIGH
Network 		tune_library_project tune_library SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5. CWE-89
SQL Injection 		CVE-2015-3314 2024-11-21 11:29 2017-09-8 Show GitHub Exploit DB Packet Storm
274800 9.8 CRITICAL
Network 		community_events_project community_events SQL injection vulnerability in WordPress Community Events plugin before 1.4. CWE-89
SQL Injection 		CVE-2015-3313 2024-11-21 11:29 2017-09-8 Show GitHub Exploit DB Packet Storm