Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250711	5	警告	IBM	-	IBM Tivoli Access Manager for e-business の WebSEAL におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4622	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

250712	7.5	危険	webscripti	-	Mafya Oyun Scrpti の profil.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4619	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250713	4.3	警告	algisinfo	-	Joomla! の Algis Info aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4618	2012-03-27 18:42	2010-12-16	Show	GitHub Exploit DB Packet Storm

250714	6.8	警告	Kanich	-	Joomla! の JotLoader (com_jotloader) コンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4617	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250715	9.3	危険	リアルネットワークス	-	RealNetworks Helix Server および Helix Mobile Server におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4596	2012-03-27 18:42	2011-03-31	Show	GitHub Exploit DB Packet Storm

250716	4.3	警告	ImpressCMS	-	ImpressCMS の modules/content/admin/content.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4616	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250717	7.5	危険	iskenderaltuntas	-	Oto Galeri Sistemi における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4615	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250718	7.5	危険	MH Products	-	Ero Auktion の item.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4614	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250719	7.5	危険	Hycus CMS project	-	Hycus CMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4613	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

250720	6.8	警告	Hycus CMS project	-	Hycus CMS の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4612	2012-03-27 18:42	2010-12-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286501	-	cisco	telepresence_mcu_software	The network stack in Cisco TelePresence MCU Software before 4.3(2.30) allows remote attackers to cause a denial of service (memory consumption) via crafted TCP packets, aka Bug ID CSCtz35468.	CWE-399 Resource Management Errors	CVE-2014-3397	2024-11-21 11:08	2014-10-19	Show	GitHub Exploit DB Packet Storm

286502	-	redhat	enterprise_virtualization_manager	The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or…	CWE-20 Improper Input Validation	CVE-2014-3573	2024-11-21 11:08	2014-10-18	Show	GitHub Exploit DB Packet Storm

286503	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.	CWE-200 Information Exposure	CVE-2014-3680	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286504	-	jenkins-ci	monitoring_plugin	The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.	NVD-CWE-noinfo	CVE-2014-3679	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286505	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information …	CWE-200 Information Exposure	CVE-2014-3667	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286506	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.	CWE-94 Code Injection	CVE-2014-3666	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286507	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified ve…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3663	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286508	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.	CWE-200 Information Exposure	CVE-2014-3662	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286509	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.	CWE-399 Resource Management Errors	CVE-2014-3661	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

286510	-	drupal debian	drupal debian_linux	The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection att…	CWE-89 SQL Injection	CVE-2014-3704	2024-11-21 11:08	2014-10-16	Show	GitHub Exploit DB Packet Storm