Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250941	3.3	注意	OpenFabrics Alliance	-	libsdp の libsdp.conf のディフォルト設定における任意のファイルを上書きされる脆弱性	CWE-59 リンク解釈の問題	CVE-2010-4173	2012-03-27 18:42	2010-11-22	Show	GitHub Exploit DB Packet Storm

250942	5	警告	OpenTTD	-	OpenTTD におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4168	2012-03-27 18:42	2010-11-17	Show	GitHub Exploit DB Packet Storm

250943	7.5	危険	Joomla!	-	Joomla! における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4166	2012-03-27 18:42	2010-11-4	Show	GitHub Exploit DB Packet Storm

250944	6.9	警告	Mono Project	-	Mono の metadata/loader.c における権限を取得される脆弱性	CWE-Other その他	CVE-2010-4159	2012-03-27 18:42	2010-09-26	Show	GitHub Exploit DB Packet Storm

250945	4.3	警告	exv2	-	eXV2 CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4155	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250946	9.3	危険	rhinosoft	-	Rhino の FTP Voyager におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4154	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250947	9.3	危険	crossftp	-	CrossFTP Pro におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4153	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250948	7.5	危険	4site	-	4site CMS の catalog/index.shtml における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4152	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250949	6.8	警告	deluxebb	-	DeluxeBB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4151	2012-03-27 18:42	2010-11-3	Show	GitHub Exploit DB Packet Storm

250950	9.3	危険	freshwebmaster	-	FreshWebMaster Fresh FTP におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4149	2012-03-27 18:42	2010-11-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
308461	-		futomi	access_analyzer_cgi	Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspec…	CWE-79 Cross-site Scripting	CVE-2010-2366	2024-11-21 10:16	2010-09-14	Show	GitHub Exploit DB Packet Storm

308462	-		linux canonical suse	linux_kernel ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_high_availability_extension	The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows …	CWE-476 NULL Pointer Dereference	CVE-2010-2495	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

308463	7.8	HIGH Local	linux vmware avaya	linux_kernel esx aura_system_manager aura_communication_manager aura_system_platform aura_session_manager aura_presence_services iq aura_voice_portal	Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of s…	CWE-120 Classic Buffer Overflow	CVE-2010-2492	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

308464	7.8	HIGH Local	linux vmware canonical suse	linux_kernel esx ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop	The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the ci…	NVD-CWE-noinfo	CVE-2010-2524	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

308465	-		linux	linux_kernel	Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibl…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2521	2024-11-21 10:16	2010-09-8	Show	GitHub Exploit DB Packet Storm

308466	-		linux	linux_kernel	fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh va…	CWE-20 Improper Input Validation	CVE-2010-2248	2024-11-21 10:16	2010-09-8	Show	GitHub Exploit DB Packet Storm

308467	-		opensuse	opensuse	lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for phys…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-2532	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

308468	-		linux	linux_kernel	The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the st…	CWE-94 Code Injection	CVE-2010-2240	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

308469	-		linux suse debian canonical	linux_kernel linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit debian_linux ubuntu_linux	The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write a…	CWE-200 Information Exposure	CVE-2010-2226	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

308470	-		common1	moobbs2	Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-2365	2024-11-21 10:16	2010-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed