Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250931	4.3	警告	ヒューレット・パッカード	-	HP SMH におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2010-3283	2012-03-27 18:42	2010-09-22	Show	GitHub Exploit DB Packet Storm

250932	5.4	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniVista の HTTP プロキシサービスにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-3281	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250933	6.9	警告	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の TSA コンポーネントの CCAgent オプションにおける Contact Center 操作を監視または再設定される脆弱性	CWE-200 情報漏えい	CVE-2010-3280	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250934	7.6	危険	Alcatel-Lucent	-	Alcatel-Lucent OmniTouch Contact Center の CCAgent オプションのディフォルト設定における Contact Center 操作を監視または再設定される脆弱性	CWE-16 環境設定	CVE-2010-3279	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

250935	2.1	注意	VMware	-	VMware Workstation および VMware Player のインストーラにおける Web スクリプトまたは HTML の想定外の解釈が発生する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3277	2012-03-27 18:42	2010-09-23	Show	GitHub Exploit DB Packet Storm

250936	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3276	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

250937	9.3	危険	VideoLAN	-	VideoLAN VLC Media Player の libdirectx_plugin.dll における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3275	2012-03-27 18:42	2011-03-28	Show	GitHub Exploit DB Packet Storm

250938	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の Employee Search Engine におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3274	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

250939	5	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3273	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

250940	4.3	警告	Zoho Corporation	-	ZOHO ManageEngine ADSelfService Plus の security-questions 実装における任意のユーザアカウントへのアクセスを取得される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3272	2012-03-27 18:42	2011-02-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290621	-	linux redhat suse	linux_kernel enterprise_linux enterprise_mrg linux_enterprise_desktop linux_enterprise_server linux_enterprise_high_availability_extension	The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by lev…	NVD-CWE-Other	CVE-2013-3301	2024-11-21 10:53	2013-04-29	Show	GitHub Exploit DB Packet Storm

290622	-	phpmyadmin	phpmyadmin	export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users t…	NVD-CWE-noinfo	CVE-2013-3241	2024-11-21 10:53	2013-04-26	Show	GitHub Exploit DB Packet Storm

290623	-	phpmyadmin	phpmyadmin	Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a pa…	CWE-22 Path Traversal	CVE-2013-3240	2024-11-21 10:53	2013-04-26	Show	GitHub Exploit DB Packet Storm

290624	-	phpmyadmin	phpmyadmin	phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename…	CWE-94 Code Injection	CVE-2013-3239	2024-11-21 10:53	2013-04-26	Show	GitHub Exploit DB Packet Storm

290625	-	phpmyadmin	phpmyadmin	phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3 allows remote authenticated users to execute arbitrary code via a /e\x00 sequence, which is not properly handled before making a preg_replace fu…	NVD-CWE-noinfo	CVE-2013-3238	2024-11-21 10:53	2013-04-26	Show	GitHub Exploit DB Packet Storm

290626	-	cybozu	cybozu_office	Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0 allows remote attackers to hijack the authentication of arbitrary users for requests that change mob…	CWE-352 Origin Validation Error	CVE-2013-3269	2024-11-21 10:53	2013-04-25	Show	GitHub Exploit DB Packet Storm

290627	-	novell	imanager	Novell iManager 2.7 before SP6 Patch 1 does not refresh a token after a logout action, which has unspecified impact and remote attack vectors.	CWE-287 Improper Authentication	CVE-2013-3268	2024-11-21 10:53	2013-04-24	Show	GitHub Exploit DB Packet Storm

290628	-	linux	linux_kernel	The vsock_stream_sendmsg function in net/vmw_vsock/af_vsock.c in the Linux kernel before 3.9-rc7 does not initialize a certain length variable, which allows local users to obtain sensitive informatio…	CWE-200 Information Exposure	CVE-2013-3237	2024-11-21 10:53	2013-04-22	Show	GitHub Exploit DB Packet Storm

290629	-	linux	linux_kernel	The vmci_transport_dgram_dequeue function in net/vmw_vsock/vmci_transport.c in the Linux kernel before 3.9-rc7 does not properly initialize a certain length variable, which allows local users to obta…	CWE-200 Information Exposure	CVE-2013-3236	2024-11-21 10:53	2013-04-22	Show	GitHub Exploit DB Packet Storm

290630	-	linux	linux_kernel	net/tipc/socket.c in the Linux kernel before 3.9-rc7 does not initialize a certain data structure and a certain length variable, which allows local users to obtain sensitive information from kernel s…	CWE-200 Information Exposure	CVE-2013-3235	2024-11-21 10:53	2013-04-22	Show	GitHub Exploit DB Packet Storm