Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229781 4.3 警告 マイクロソフト - Microsoft Windows Help などの sysinfo/commonFunc.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2265 2012-09-25 17:38 2010-06-10 Show GitHub Exploit DB Packet Storm
229782 5 警告 Igor Sysoev - nginx におけるソースコードを取得される脆弱性 CWE-200
情報漏えい
CVE-2010-2263 2012-09-25 17:38 2010-06-15 Show GitHub Exploit DB Packet Storm
229783 10 危険 シスコシステムズ (Linksys) - Linksys WAP54Gv3 における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2010-2261 2012-09-25 17:38 2010-06-9 Show GitHub Exploit DB Packet Storm
229784 7.5 危険 payperviewvideosoftware - Pay Per Minute Video Chat Script の index.ie.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-2257 2012-09-25 17:38 2010-06-9 Show GitHub Exploit DB Packet Storm
229785 4.3 警告 payperviewvideosoftware - Pay Per Minute Video Chat Script におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2256 2012-09-25 17:38 2010-06-9 Show GitHub Exploit DB Packet Storm
229786 4.4 警告 libvirt.org - Red Hat libvirt におけるホスト OS 上で任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2238 2012-09-25 17:38 2010-06-24 Show GitHub Exploit DB Packet Storm
229787 4.4 警告 libvirt.org - Red Hat libvirt におけるホスト OS 上で任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-2237 2012-09-25 17:38 2010-06-24 Show GitHub Exploit DB Packet Storm
229788 7.5 危険 LibTIFF - ImageMagick で使用される LibTIFF の tif_getimage.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-2233 2012-09-25 17:38 2010-06-23 Show GitHub Exploit DB Packet Storm
229789 6.8 警告 Moodle - Moodle の report/overview/report.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2010-2231 2012-09-25 17:38 2010-06-17 Show GitHub Exploit DB Packet Storm
229790 4.3 警告 マカフィー - McAfee UTM Firewall の cgi-bin/cgix/help におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-2290 2012-09-25 17:38 2010-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
299081 - gazi_download_portal gazi_download_portal SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unkn… NVD-CWE-Other
CVE-2007-2810 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299082 - osk advance-flow Cross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2007-2811 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299083 - osk advance-flow The vendor has addressed this issue through the release of the following product update: http://www.evalue.jp/pro/af/ CWE-79
Cross-site Scripting
CVE-2007-2811 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299084 - pegasus imagn_activex_control Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attackers to execute arbitrary code via (1) a long FileName parameter, or unspecified … NVD-CWE-Other
CVE-2007-2814 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299085 - cactusoft parodia Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the strJobIDs parameter. NVD-CWE-Other
CVE-2007-2818 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299086 - track\+ track\+ Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the projId parameter. NVD-CWE-Other
CVE-2007-2819 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299087 - ksign ksignswat Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote attackers to execute arbitrary code via long arguments to the (1) SWAT_Init, (2) SW… NVD-CWE-Other
CVE-2007-2820 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299088 - ht_editor ht_editor Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the editor display width. NOTE: some of the det… NVD-CWE-Other
CVE-2007-2823 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299089 - atmail atmail_webmail Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) links … NVD-CWE-Other
CVE-2007-2825 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm
299090 - lead_technologies leadtools_isis_activex_control Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2007-2827 2017-07-29 10:31 2007-05-23 Show GitHub Exploit DB Packet Storm