Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250851	7.5	危険	jurpo	-	Jurpopage の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4360	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250852	7.5	危険	jurpo	-	Jurpopage の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4359	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250853	4.3	警告	mrcgiguy	-	MCG Guestbook の gb.cgi におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4358	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250854	7.5	危険	boka	-	SiteEngine の comments.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4357	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250855	7.5	危険	site2nite	-	Site2Nite Big Truck Broker の news_default.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4356	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250856	3.5	注意	dadabik	-	DaDaBIK におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4355	2012-03-27 18:42	2010-12-1	Show	GitHub Exploit DB Packet Storm

250857	5.1	警告	MantisBT Group	-	MantisBT の admin/upgrade_unattended.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4350	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250858	5	警告	MantisBT Group	-	MantisBT の admin/upgrade_unattended.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4349	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250859	4.3	警告	MantisBT Group	-	MantisBT の admin/upgrade_unattended.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4348	2012-03-27 18:42	2010-12-14	Show	GitHub Exploit DB Packet Storm

250860	7.1	危険	Linux	-	Linux kernel の aun_incoming 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4342	2012-03-27 18:42	2010-12-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277881	9.8	CRITICAL Network	apache oracle	groovy retail_store_inventory_management health_sciences_clinical_development_center retail_service_backbone retail_order_broker_cloud_service webcenter_sites	The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted serialized obje…	CWE-74 Injection	CVE-2015-3253	2024-11-21 11:29	2015-08-13	Show	GitHub Exploit DB Packet Storm

277882	-		openafs	openafs	Buffer overflow in the Solaris kernel extension in OpenAFS before 1.6.13 allows local users to cause a denial of service (panic or deadlock) or possibly have other unspecified impact via a large grou…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3286	2024-11-21 11:29	2015-08-12	Show	GitHub Exploit DB Packet Storm

277883	-		openafs	openafs	The pioctl for the OSD FS command in OpenAFS before 1.6.13 uses the wrong pointer when writing the results of the RPC, which allows local users to cause a denial of service (memory corruption and ker…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-3285	2024-11-21 11:29	2015-08-12	Show	GitHub Exploit DB Packet Storm

277884	-		openafs	openafs	pioctls in OpenAFS 1.6.x before 1.6.13 allows local users to read kernel memory via crafted commands.	CWE-200 Information Exposure	CVE-2015-3284	2024-11-21 11:29	2015-08-12	Show	GitHub Exploit DB Packet Storm

277885	-		openafs	openafs	OpenAFS before 1.6.13 allows remote attackers to spoof bos commands via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3283	2024-11-21 11:29	2015-08-12	Show	GitHub Exploit DB Packet Storm

277886	-		openafs	openafs	vos in OpenAFS before 1.6.13, when updating VLDB entries, allows remote attackers to obtain stack data by sniffing the network.	CWE-200 Information Exposure	CVE-2015-3282	2024-11-21 11:29	2015-08-12	Show	GitHub Exploit DB Packet Storm

277887	-		fortinet	fortios	Cross-site scripting (XSS) vulnerability in the DHCP Monitor page in the Web User Interface (WebUI) in Fortinet FortiOS before 5.2.4 on FortiGate devices allows remote attackers to inject arbitrary w…	CWE-79 Cross-site Scripting	CVE-2015-3626	2024-11-21 11:29	2015-08-11	Show	GitHub Exploit DB Packet Storm

277888	-		redhat	jboss_operations_network	Cross-site scripting (XSS) vulnerability in the 404 error page in Red Hat JBoss Operations Network before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2015-3267	2024-11-21 11:29	2015-08-11	Show	GitHub Exploit DB Packet Storm

277889	-		linux redhat debian canonical	linux_kernel enterprise_linux debian_linux ubuntu_linux	The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges …	NVD-CWE-Other	CVE-2015-3636	2024-11-21 11:29	2015-08-6	Show	GitHub Exploit DB Packet Storm

277890	-		debian wordpress	debian_linux wordpress	Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3.9.x, 4.0.x, and 4.1.x before 4.1.2 and other products, all…	CWE-79 Cross-site Scripting	CVE-2015-3439	2024-11-21 11:29	2015-08-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed