Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250891	4	警告	IBM	-	IBM WCM のオーサリングツールにおけるドラフト生成のアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-4806	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250892	7.5	危険	marcusg	-	PHP-Fusion の MG User-Fotoalbum モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4791	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250893	5.8	警告	in-mediakg	-	FilterFTP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4790	2012-03-27 18:42	2011-04-26	Show	GitHub Exploit DB Packet Storm

250894	6.8	警告	PHP Web Scripts	-	PHP Web Scripts Easy Banner Free の member.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4784	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

250895	2.6	注意	PHP Web Scripts	-	PHP Web Scripts Easy Banner Free の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4783	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

250896	7.5	危険	softwebsnepal	-	Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4782	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

250897	5	警告	enanocms	-	Enano CMS における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2010-4781	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

250898	7.5	危険	enanocms	-	Enano CMS の check_banlist 関数における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4780	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

250899	4.3	警告	BraveNewCode WordPress.org	-	WordPress の WPtouch プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4779	2012-03-27 18:42	2011-04-7	Show	GitHub Exploit DB Packet Storm

250900	4.3	警告	Horde	-	Horde Groupware Webmail Edition のfetchmailprefs.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4778	2012-03-27 18:42	2011-04-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280541	6.5	MEDIUM Network	uclouvain google debian	openjpeg pdfium debian_linux	Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a craf…	CWE-415 Double Free	CVE-2015-1239	2024-11-21 11:24	2017-10-19	Show	GitHub Exploit DB Packet Storm

280542	5.5	MEDIUM Local	google	chrome	Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged memory write and process crash) via a crafted MP4 file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-1206	2024-11-21 11:24	2017-10-7	Show	GitHub Exploit DB Packet Storm

280543	5.9	MEDIUM Network	percona	xtrabackup toolkit	The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which the server response…	CWE-200 Information Exposure	CVE-2015-1027	2024-11-21 11:24	2017-09-29	Show	GitHub Exploit DB Packet Storm

280544	7.5	HIGH Network	ppmd_project	ppmd	Directory traversal vulnerability in ppmd 10.1-5.	CWE-22 Path Traversal	CVE-2015-1199	2024-11-21 11:24	2017-08-29	Show	GitHub Exploit DB Packet Storm

280545	7.5	HIGH Network	linux-ha	ha	Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5.	CWE-22 Path Traversal	CVE-2015-1198	2024-11-21 11:24	2017-08-29	Show	GitHub Exploit DB Packet Storm

280546	6.1	MEDIUM Network	exponentcms	exponent_cms	Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2.	CWE-79 Cross-site Scripting	CVE-2015-1177	2024-11-21 11:24	2017-08-29	Show	GitHub Exploit DB Packet Storm

280547	7.8	HIGH Local	mobilis	mobiconnect	Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mms_dll_r.dll or mediapla…	CWE-426 Untrusted Search Path	CVE-2015-0974	2024-11-21 11:24	2017-08-29	Show	GitHub Exploit DB Packet Storm

280548	7.5	HIGH Network	oisf	libhtp	libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).	CWE-476 NULL Pointer Dereference	CVE-2015-0928	2024-11-21 11:24	2017-08-29	Show	GitHub Exploit DB Packet Storm

280549	9.8	CRITICAL Network	unit4	teta_web	Session fixation vulnerability in Unit4 Polska TETA Web (formerly TETA Galactica) 22.62.3.4 and earlier allows remote attackers to hijack web sessions via a session id.	CWE-384 Session Fixation	CVE-2015-1174	2024-11-21 11:24	2017-08-3	Show	GitHub Exploit DB Packet Storm

280550	6.5	MEDIUM Network	google debian	chrome debian_linux	Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.	CWE-415 Double Free	CVE-2015-1207	2024-11-21 11:24	2017-06-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed