Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251221	7.5	危険	mg12	-	WordPress 用 WP-RecentComments プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1067	2012-02-17 11:16	2012-02-14	Show	GitHub Exploit DB Packet Storm

251222	4.3	警告	SmartyCMS	-	SmartyCMS の template モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1066	2012-02-17 11:16	2012-02-14	Show	GitHub Exploit DB Packet Storm

251223	4.3	警告	2X Software	-	2X ApplicationServer の TuxScripting.dll における任意のファイルを作成される脆弱性	CWE-Other その他	CVE-2012-1065	2012-02-17 11:00	2012-02-14	Show	GitHub Exploit DB Packet Storm

251224	9.3	危険	マイクロソフト AB Team	-	Microsoft Windows XP で利用される Indeo コーデックにおける権限昇格の脆弱性	CWE-Other その他	CVE-2010-3138	2012-02-16 16:14	2010-08-27	Show	GitHub Exploit DB Packet Storm

251225	4.4	警告	マイクロソフト	-	Microsoft Windows Server 2008 の colorcpl.exe における権限昇格の脆弱性	CWE-Other その他	CVE-2010-5082	2012-02-16 16:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

251226	9.3	危険	アップルマイクロソフト	-	Microsoft Windows 7 Professional 64-bit におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-5046	2012-02-16 11:40	2011-12-30	Show	GitHub Exploit DB Packet Storm

251227	4.3	警告	アドビシステムズ	-	Adobe RoboHelp for Word におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0765	2012-02-16 11:27	2012-02-14	Show	GitHub Exploit DB Packet Storm

251228	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0766	2012-02-16 11:23	2012-02-14	Show	GitHub Exploit DB Packet Storm

251229	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0764	2012-02-16 11:23	2012-02-14	Show	GitHub Exploit DB Packet Storm

251230	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0763	2012-02-16 11:21	2012-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305611	6.5	MEDIUM Network	drupal	drupal	Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal s…	CWE-20 Improper Input Validation	CVE-2010-2473	2024-11-21 10:16	2019-11-8	Show	GitHub Exploit DB Packet Storm

305612	4.8	MEDIUM Network	drupal	drupal	Locale module and dependent contributed modules in Drupal 6.x before 6.16 and 5.x before version 5.22 do not sanitize the display of language codes, native and English language names properly which c…	CWE-79 Cross-site Scripting	CVE-2010-2472	2024-11-21 10:16	2019-11-8	Show	GitHub Exploit DB Packet Storm

305613	6.1	MEDIUM Network	drupal	drupal	Drupal 5.x and 6.x before 6.16 uses a user-supplied value in output during site installation which could allow an attacker to craft a URL and perform a cross-site scripting attack.	CWE-79 Cross-site Scripting	CVE-2010-2250	2024-11-21 10:16	2019-11-8	Show	GitHub Exploit DB Packet Storm

305614	7.5	HIGH Network	linux	linux_kernel	A vulnerability exists in kernel/time/clocksource.c in the Linux kernel before 2.6.34 where on non-GENERIC_TIME systems (GENERIC_TIME=n), accessing /sys/devices/system/clocksource/clocksource0/curren…	CWE-20 Improper Input Validation	CVE-2010-2243	2024-11-21 10:16	2019-11-8	Show	GitHub Exploit DB Packet Storm

305615	6.1	MEDIUM Network	drupal debian	drupal debian_linux	Drupal versions 5.x and 6.x has open redirection	CWE-601 Open Redirect	CVE-2010-2471	2024-11-21 10:16	2019-11-7	Show	GitHub Exploit DB Packet Storm

305616	9.8	CRITICAL Network	ruby-rbot	rbot	Rbot Reaction plugin allows command execution	CWE-20 Improper Input Validation	CVE-2010-2446	2024-11-21 10:16	2019-11-7	Show	GitHub Exploit DB Packet Storm

305617	7.5	HIGH Network	makepasswd_project	makepasswd	makepasswd 1.10 default settings generate insecure passwords	CWE-1188 Insecure Default Initialization of Resource	CVE-2010-2247	2024-11-21 10:16	2019-11-7	Show	GitHub Exploit DB Packet Storm

305618	7.5	HIGH Network	redhat	directory_server 389_directory_server	The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query.	CWE-476 NULL Pointer Dereference	CVE-2010-2222	2024-11-21 10:16	2019-11-6	Show	GitHub Exploit DB Packet Storm

305619	9.1	CRITICAL Network	redhat	icedtea6	IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files.	CWE-863 Incorrect Authorization	CVE-2010-2548	2024-11-21 10:16	2019-11-1	Show	GitHub Exploit DB Packet Storm

305620	6.5	MEDIUM Network	mumble debian	mumble debian_linux	Mumble: murmur-server has DoS due to malformed client query	CWE-20 Improper Input Validation	CVE-2010-2490	2024-11-21 10:16	2019-11-1	Show	GitHub Exploit DB Packet Storm