Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227651	7.5	危険	Pligg	-	Pligg における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-2577	2012-12-20 19:29	2010-08-11	Show	GitHub Exploit DB Packet Storm

227652	9.3	危険	raphael assenat	-	libmikmod の loaders/load_it.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2546	2012-12-20 19:29	2010-08-5	Show	GitHub Exploit DB Packet Storm

227653	10	危険	UMN	-	mapserv.c の MapServer における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-2540	2012-12-20 19:29	2010-08-2	Show	GitHub Exploit DB Packet Storm

227654	2.1	注意	UMN	-	MapServer の mapserv におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-2539	2012-12-20 19:29	2010-07-22	Show	GitHub Exploit DB Packet Storm

227655	5	警告	skbuff	-	Mandriva Linux 上で稼動する iputils の ping.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-2529	2012-12-20 19:29	2010-07-28	Show	GitHub Exploit DB Packet Storm

227656	5	警告	SaschArt	-	Soft SaschArt SasCAM Webcam Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-2505	2012-12-20 19:29	2010-06-28	Show	GitHub Exploit DB Packet Storm

227657	6	警告	Splunk	-	Splunk における重要な情報を取得される脆弱性	CWE-Other その他	CVE-2010-2504	2012-12-20 19:29	2010-05-3	Show	GitHub Exploit DB Packet Storm

227658	4.3	警告	Splunk	-	Splunk におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2503	2012-12-20 19:29	2010-05-3	Show	GitHub Exploit DB Packet Storm

227659	7.5	危険	Splunk	-	Splunk におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-2502	2012-12-20 19:29	2010-05-3	Show	GitHub Exploit DB Packet Storm

227660	5	警告	レッドハット	-	JBoss Enterprise SOA Platform の picketlink-sts.war におけるアクセス制限を回避される脆弱性	CWE-16 環境設定	CVE-2010-2493	2012-12-20 19:29	2010-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273851	5.4	MEDIUM Network	php-fusion	php-fusion	Cross-site scripting (XSS) vulnerability in PHP-Fusion 9.	CWE-79 Cross-site Scripting	CVE-2015-8375	2024-11-21 11:38	2017-09-26	Show	GitHub Exploit DB Packet Storm

273852	5.9	MEDIUM Network	unify	openstage_60_firmware openscape_desk_phone_ip_55g_sip_firmware openstage_15_firmware openstage_20e_firmware openstage_20_firmware openstage_40_firmware openscape_desk_phone_ip_35g_s…	OpenStage 60 and OpenScape Desk Phone IP 55G SIP V3, OpenStage 15, 20E, 20 and 40 and OpenScape Desk Phone IP 35G SIP V3, OpenScape Desk Phone IP 35G Eco SIP V3, OpenStage 60 and OpenScape Desk Phone…	CWE-200 Information Exposure	CVE-2015-8251	2024-11-21 11:38	2017-09-26	Show	GitHub Exploit DB Packet Storm

273853	7.5	HIGH Network	chef	chef	The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.	CWE-200 Information Exposure	CVE-2015-8559	2024-11-21 11:38	2017-09-21	Show	GitHub Exploit DB Packet Storm

273854	3.7	LOW Network	huawei	p8_firmware	Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remote attackers to obtain user equipment (aka UE) measurements of signal strengths.	CWE-200 Information Exposure	CVE-2015-8224	2024-11-21 11:38	2017-09-21	Show	GitHub Exploit DB Packet Storm

273855	6.1	MEDIUM Network	ultimatemember	ultimate_member	Cross-site scripting (XSS) vulnerability in the Ultimate Member WordPress plugin before 1.3.29 for WordPress allows remote attackers to inject arbitrary web script or HTML via the _refer parameter to…	CWE-79 Cross-site Scripting	CVE-2015-8354	2024-11-21 11:38	2017-09-12	Show	GitHub Exploit DB Packet Storm

273856	6.1	MEDIUM Network	role_scoper_project	role_scoper	Cross-site scripting (XSS) vulnerability in the Role Scoper plugin before 1.3.67 for WordPress allows remote attackers to inject arbitrary web script or HTML via the object_name parameter in a rs-obj…	CWE-79 Cross-site Scripting	CVE-2015-8353	2024-11-21 11:38	2017-09-12	Show	GitHub Exploit DB Packet Storm

273857	9.0	CRITICAL Network	gwolle_guestbook_project	gwolle_guestbook	PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code v…	CWE-94 Code Injection	CVE-2015-8351	2024-11-21 11:38	2017-09-12	Show	GitHub Exploit DB Packet Storm

273858	6.1	MEDIUM Network	inboundnow	call_to_action	Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab paramet…	CWE-79 Cross-site Scripting	CVE-2015-8350	2024-11-21 11:38	2017-09-12	Show	GitHub Exploit DB Packet Storm

273859	6.1	MEDIUM Network	gameconnect	sourcebans	Cross-site scripting (XSS) vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php.	CWE-79 Cross-site Scripting	CVE-2015-8349	2024-11-21 11:38	2017-09-12	Show	GitHub Exploit DB Packet Storm

273860	5.9	MEDIUM Network	lightdm_project	lightdm	Array index error in LightDM (aka Light Display Manager) 1.14.3, 1.16.x before 1.16.6 when the XDMCP server is enabled allows remote attackers to cause a denial of service (process crash) via an XDMC…	CWE-129 Improper Validation of Array Index	CVE-2015-8316	2024-11-21 11:38	2017-09-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed