Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251191 5 警告 Gecad Technologies - AXIGEN Mail Server の HTTP インターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2010-3460 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251192 4.3 警告 Gecad Technologies - AXIGEN Mail Server の Ajax WebMail インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3459 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251193 4 警告 Linux - Linux kernel のdrivers/platform/x86/thinkpad_acpi.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2010-3448 2012-03-27 18:42 2011-01-3 Show GitHub Exploit DB Packet Storm
251194 4.3 警告 Horde - Horde Gollem の view.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3447 2012-03-27 18:42 2011-04-4 Show GitHub Exploit DB Packet Storm
251195 7.5 危険 fribidi - PyFriBidi で使用される GNU FriBidi の log2vis_utf8 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-3444 2012-03-27 18:42 2011-01-10 Show GitHub Exploit DB Packet Storm
251196 7.5 危険 moinejf - abcm2ps における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-3441 2012-03-27 18:42 2011-02-18 Show GitHub Exploit DB Packet Storm
251197 1.9 注意 kernel.org - Linux-PAM の privilege-dropping 実装における重要情報を取得される脆弱性 CWE-DesignError
CVE-2010-3431 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
251198 4.7 警告 kernel.org - Linux-PAM の privilege-dropping 実装における重要情報を取得される脆弱性 CWE-DesignError
CVE-2010-3430 2012-03-27 18:42 2011-01-24 Show GitHub Exploit DB Packet Storm
251199 7.5 危険 Symphony CMS - Symphony CMS の lib/toolkit/events/event.section.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2010-3458 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
251200 4.3 警告 Symphony CMS - Symphony CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2010-3457 2012-03-27 18:42 2010-09-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276741 - mysql-lite-administrator_project mysql-lite-administrator Multiple cross-site scripting (XSS) vulnerabilities in MySql Lite Administrator (mysql-lite-administrator) beta-1 allow remote attackers to inject arbitrary web script or HTML via the table_name para… CWE-79
Cross-site Scripting
CVE-2015-5064 2024-11-21 11:32 2015-06-24 Show GitHub Exploit DB Packet Storm
276742 - silverstripe silverstripe Multiple cross-site scripting (XSS) vulnerabilities in SilverStripe CMS & Framework 3.1.13 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_username or (2) admin_passwo… CWE-79
Cross-site Scripting
CVE-2015-5063 2024-11-21 11:32 2015-06-24 Show GitHub Exploit DB Packet Storm
276743 - silverstripe silverstripe Open redirect vulnerability in SilverStripe CMS & Framework 3.1.13 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the returnURL parameter t… NVD-CWE-Other
CVE-2015-5062 2024-11-21 11:32 2015-06-24 Show GitHub Exploit DB Packet Storm
276744 - zohocorp manageengine_assetexplorer Cross-site scripting (XSS) vulnerability in Zoho ManageEngine AssetExplorer 6.1 service pack 6112 and earlier allows remote authenticated users with permissions to add new vendors to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2015-5061 2024-11-21 11:32 2015-06-24 Show GitHub Exploit DB Packet Storm
276745 9.8 CRITICAL
Network
pexip pexip_infinity The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request. CWE-269
 Improper Privilege Management
CVE-2015-4719 2024-11-21 11:31 2020-09-24 Show GitHub Exploit DB Packet Storm
276746 7.5 HIGH
Network
mongodb
fedoraproject
bson
fedora
The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attackers to cause a denial of service (worker resource consumption) via a crafted stri… CWE-400
 Uncontrolled Resource Consumption
CVE-2015-4411 2024-11-21 11:31 2020-02-21 Show GitHub Exploit DB Packet Storm
276747 7.5 HIGH
Network
moped_project
fedoraproject
moped
fedora
The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows remote attackers to cause a denial of service (worker resource consumption) or pe… CWE-20
 Improper Input Validation 
CVE-2015-4410 2024-11-21 11:31 2020-02-21 Show GitHub Exploit DB Packet Storm
276748 4.9 MEDIUM
Network
owncloud owncloud The fetch function in OAuth/Curl.php in Dropbox-PHP, as used in ownCloud Server before 6.0.8, 7.x before 7.0.6, and 8.x before 8.0.4 when an external Dropbox storage has been mounted, allows remote a… CWE-552
 Files or Directories Accessible to External Parties
CVE-2015-4715 2024-11-21 11:31 2020-02-18 Show GitHub Exploit DB Packet Storm
276749 8.8 HIGH
Network
dedecms dedecms A file upload issue exists in DeDeCMS before 5.7-sp1, which allows malicious users getshell. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2015-4553 2024-11-21 11:31 2020-01-7 Show GitHub Exploit DB Packet Storm
276750 5.4 MEDIUM
Network
cloudera cloudera_manager Multiple cross-site scripting (XSS) vulnerabilities in the Cloudera Manager UI before 5.4.3 allow remote authenticated users to inject arbitrary web script or HTML using unspecified vectors. CWE-79
Cross-site Scripting
CVE-2015-4457 2024-11-21 11:31 2019-11-27 Show GitHub Exploit DB Packet Storm