Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250621	7.5	危険	commodityrentals	-	DVD Rentals Script における任意の SQL コマンドを実行される脆弱性	CWE-89 SQLインジェクション	CVE-2010-4770	2012-03-27 18:42	2011-03-23	Show	GitHub Exploit DB Packet Storm

250622	7.5	危険	Janguo Joomla!	-	Joomla! の Jimtawl コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4769	2012-03-27 18:42	2011-03-23	Show	GitHub Exploit DB Packet Storm

250623	6	警告	OTRS プロジェクト	-	OTRS における待ち行列アクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4768	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250624	5	警告	OTRS プロジェクト	-	OTRS におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4767	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250625	4.3	警告	OTRS プロジェクト	-	OTRS の AgentTicketForward 機能における重要な画像情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4766	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250626	4.9	警告	OTRS プロジェクト	-	OTRS の Kernel::System::Main::FileWrite メソッドにおける icketCounter.log のデータを破損される脆弱性	CWE-362 競合状態	CVE-2010-4765	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250627	5	警告	OTRS プロジェクト	-	OTRS における電子メール通信をなりすまされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2010-4764	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250628	6.5	警告	OTRS プロジェクト	-	OTRS の ACL 顧客ステータスチケットタイプ設定における ACL 制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4763	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250629	3.5	注意	OTRS プロジェクト	-	OTRS のリッチテキストエディタコンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4762	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

250630	4	警告	OTRS プロジェクト	-	OTRS の顧客インターフェースチケット印刷ダイアログにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4761	2012-03-27 18:42	2011-03-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294801	-	debian marc_vertes	txt2man	A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222.	CWE-59 Link Following	CVE-2013-1444	2024-11-21 10:49	2013-10-1	Show	GitHub Exploit DB Packet Storm

294802	-	xen	xen	Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCP…	CWE-200 Information Exposure	CVE-2013-1442	2024-11-21 10:49	2013-10-1	Show	GitHub Exploit DB Packet Storm

294803	-	djangoproject	django	The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)…	CWE-287 Improper Authentication	CVE-2013-1443	2024-11-21 10:49	2013-09-24	Show	GitHub Exploit DB Packet Storm

294804	-	simon_mcvittie	telepathy_gabble	The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows …	CWE-20 Improper Input Validation	CVE-2013-1431	2024-11-21 10:49	2013-09-24	Show	GitHub Exploit DB Packet Storm

294805	-	exactcode	exactimage	econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.	CWE-20 Improper Input Validation	CVE-2013-1441	2024-11-21 10:49	2013-09-17	Show	GitHub Exploit DB Packet Storm

294806	-	libraw	libraw	The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.	NVD-CWE-Other	CVE-2013-1439	2024-11-21 10:49	2013-09-17	Show	GitHub Exploit DB Packet Storm

294807	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1344	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

294808	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1343	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

294809	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1342	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

294810	-	microsoft	windows_server_2008 windows_2003_server windows_xp windows_8 windows_7 windows_vista	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 allows local us…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1341	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed