Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230541 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230542 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230543 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230544 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230545 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230546 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230547 7.5 危険 xigla - Xigla Software Absolute FAQ Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6854 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
230548 4.3 警告 PHP-Fusion - PHP-Fusion の messages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6850 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
230549 6.8 警告 w2b - phpGreetCards の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6849 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
230550 4.3 警告 w2b - phpGreetCards の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6848 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
345811 - mozilla firefox The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perfo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0166 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
345812 - mozilla firefox The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0168 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
345813 - mozilla firefox Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site s… CWE-79
Cross-site Scripting 		CVE-2010-0170 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
345814 - mozilla firefox toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorizat… NVD-CWE-Other
CVE-2010-0172 2017-09-19 10:30 2010-03-26 Show GitHub Exploit DB Packet Storm
345815 - nos_microsystems
adobe 		getplus_download_manager
download_manager 		A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are … CWE-20
 Improper Input Validation  		CVE-2010-0189 2017-09-19 10:30 2010-02-24 Show GitHub Exploit DB Packet Storm
345816 - nos_microsystems
adobe 		getplus_download_manager
download_manager 		Per: http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html "Adobe is aware of the recently posted report of a remote code execution vulnerability in the Adobe Download Manager… CWE-20
 Improper Input Validation  		CVE-2010-0189 2017-09-19 10:30 2010-02-24 Show GitHub Exploit DB Packet Storm
345817 - wireshark wireshark Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0304 2017-09-19 10:30 2010-02-4 Show GitHub Exploit DB Packet Storm
345818 - kvm_qumranet kvm The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execu… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2010-0306 2017-09-19 10:30 2010-02-13 Show GitHub Exploit DB Packet Storm
345819 - squid-cache squid lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a h… CWE-20
 Improper Input Validation  		CVE-2010-0308 2017-09-19 10:30 2010-02-4 Show GitHub Exploit DB Packet Storm
345820 - videolan vlc_media_player Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass)… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2010-0364 2017-09-19 10:30 2010-01-22 Show GitHub Exploit DB Packet Storm