Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250661	2.1	注意	IBM	-	IBM Lotus Notes Traveler におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4548	2012-03-27 18:42	2010-02-4	Show	GitHub Exploit DB Packet Storm

250662	3.5	注意	IBM	-	IBM Lotus Notes Traveler におけるアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4547	2012-03-27 18:42	2010-03-19	Show	GitHub Exploit DB Packet Storm

250663	4	警告	IBM	-	IBM Lotus Notes Traveler におけるアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4546	2012-03-27 18:42	2010-03-19	Show	GitHub Exploit DB Packet Storm

250664	4	警告	IBM	-	IBM Lotus Notes Traveler におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4545	2012-03-27 18:42	2010-02-23	Show	GitHub Exploit DB Packet Storm

250665	4.3	警告	IBM	-	IBM Lotus Notes Traveler のサーブレットにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4544	2012-03-27 18:42	2010-12-16	Show	GitHub Exploit DB Packet Storm

250666	4.3	警告	WordPress.org	-	WordPress などで使用される KSES におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4536	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250667	5	警告	Django Software Foundation	-	Django のパスワードリセット機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-4535	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

250668	4	警告	Django Software Foundation	-	Django の管理用のインターフェースにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4534	2012-03-27 18:42	2010-12-22	Show	GitHub Exploit DB Packet Storm

250669	4.3	警告	MyBB Group	-	MyBB におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4522	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

250670	4.3	警告	Drupal Earl Miles	-	Drupal の Views モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4521	2012-03-27 18:42	2010-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295061	-	hp	linux_imaging_and_printing_project	HP Linux Imaging and Printing (HPLIP) before 3.13.2 uses world-writable permissions for /var/log/hp and /var/log/hp/tmp, which allows local users to delete log files via standard filesystem operation…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-6108	2024-11-21 10:45	2014-02-15	Show	GitHub Exploit DB Packet Storm

295062	-	redhat	satellite satellite_5_managed_db spacewalk-java	Multiple cross-site scripting (XSS) vulnerabilities in systems/sdc/notes.jsp in Spacewalk and Red Hat Network (RHN) Satellite 5.6 allow remote attackers to inject arbitrary web script or HTML via the…	CWE-79 Cross-site Scripting	CVE-2012-6149	2024-11-21 10:45	2014-02-15	Show	GitHub Exploit DB Packet Storm

295063	-	pidgin	pidgin	The Yahoo! protocol plugin in libpurple in Pidgin before 2.10.8 does not properly validate UTF-8 data, which allows remote attackers to cause a denial of service (application crash) via crafted byte …	CWE-20 Improper Input Validation	CVE-2012-6152	2024-11-21 10:45	2014-02-7	Show	GitHub Exploit DB Packet Storm

295064	-	zabbix	zabbix	libs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x before 2.1.2 does not properly set the CURLOPT_SSL_VERIFYHOST option for libcurl, which allows man-in-the-…	CWE-310 Cryptographic Issues	CVE-2012-6086	2024-11-21 10:45	2014-01-30	Show	GitHub Exploit DB Packet Storm

295065	-	apple canonical net-snmp	mac_os_x ubuntu_linux net-snmp	Net-SNMP 5.7.1 and earlier, when AgentX is registering to handle a MIB and processing GETNEXT requests, allows remote attackers to cause a denial of service (crash or infinite loop, CPU consumption, …	CWE-399 Resource Management Errors	CVE-2012-6151	2024-11-21 10:45	2013-12-14	Show	GitHub Exploit DB Packet Storm

295066	-	samba canonical	samba ubuntu_linux	The winbind_name_list_to_sid_string_list function in nsswitch/pam_winbind.c in Samba through 4.1.2 handles invalid require_membership_of group names by accepting authentication by any user, which all…	CWE-20 Improper Input Validation	CVE-2012-6150	2024-11-21 10:45	2013-12-4	Show	GitHub Exploit DB Packet Storm

295067	-	kth opensuse	snack_sound_toolkit wavesurfer opensuse	Heap-based buffer overflow in the GetWavHeader function in generic/jkSoundFile.c in the Snack Sound Toolkit, as used in WaveSurfer 1.8.8p4, allows remote attackers to cause a denial of service (crash…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-6303	2024-11-21 10:45	2013-10-29	Show	GitHub Exploit DB Packet Storm

295068	-	oracle mariadb	mysql mariadb	Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify the salt during multiple executions of the change_user command within the same connection wh…	CWE-522 Insufficiently Protected Credentials	CVE-2012-5627	2024-11-21 10:45	2013-10-2	Show	GitHub Exploit DB Packet Storm

295069	-	moodle	moodle	repository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not verify that the server hostname matches a domain name i…	CWE-20 Improper Input Validation	CVE-2012-6087	2024-11-21 10:45	2013-09-16	Show	GitHub Exploit DB Packet Storm

295070	-	cisco	wireless_control_system prime_network_control_system	Multiple cross-site scripting (XSS) vulnerabilities in Health Monitor Login pages in Cisco Prime Network Control System (NCS) and Wireless Control System (WCS) allow remote attackers to inject arbitr…	CWE-79 Cross-site Scripting	CVE-2012-5990	2024-11-21 10:45	2013-09-6	Show	GitHub Exploit DB Packet Storm