Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251261 4.3 警告 IBM - IBM RM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3317 2012-03-27 18:42 2010-09-13 Show GitHub Exploit DB Packet Storm
251262 4.3 警告 EGroupware - EGroupware の login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3314 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
251263 7.5 危険 EGroupware - EGroupware の phpgwapi/js/fckeditor/editor/dialog/fck_spellerpages/spellerpages/serverscripts/spellchecker.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3313 2012-03-27 18:42 2010-09-22 Show GitHub Exploit DB Packet Storm
251264 1.9 注意 Linux - Linux kernel の net/rose/af_rose.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2010-3310 2012-03-27 18:42 2010-09-29 Show GitHub Exploit DB Packet Storm
251265 5.8 警告 GNOME Project - Epiphany における任意の https Web サイトを偽装される脆弱性 CWE-Other
その他 		CVE-2010-3312 2012-03-27 18:42 2009-11-4 Show GitHub Exploit DB Packet Storm
251266 7.5 危険 dustincowell - Free Simple CMS の themes/default/index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2010-3307 2012-03-27 18:42 2010-10-5 Show GitHub Exploit DB Packet Storm
251267 5 警告 salvo g. tomaselli - Weborf の modURL 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3306 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
251268 3.5 注意 MantisBT Group - MantisBT におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3303 2012-03-27 18:42 2010-08-4 Show GitHub Exploit DB Packet Storm
251269 2.1 注意 Linux - Linux kernel の eql_g_master_cfg におけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2010-3297 2012-03-27 18:42 2010-09-30 Show GitHub Exploit DB Packet Storm
251270 4.3 警告 pecl-php - APC 拡張 の apc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3294 2012-03-27 18:42 2010-09-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
247581 5.3 MEDIUM
Network 		synacor zimbra_collaboration_suite mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 before 8.6.0.Patch10 allows Information Exposure through Verbose Error Messages containing a stack dump, tra… CWE-200
Information Exposure 		CVE-2018-10950 2024-11-21 12:42 2018-05-10 Show GitHub Exploit DB Packet Storm
247582 5.3 MEDIUM
Network 		synacor zimbra_collaboration_suite mailboxd in Zimbra Collaboration Suite 8.8 before 8.8.8; 8.7 before 8.7.11.Patch3; and 8.6 allows Account Enumeration by leveraging a Discrepancy between the "HTTP 404 - account is not active" and "H… CWE-203
 Information Exposure Through Discrepancy 		CVE-2018-10949 2024-11-21 12:42 2018-05-10 Show GitHub Exploit DB Packet Storm
247583 5.5 MEDIUM
Local 		alps pointing-device_driver An issue was discovered in Alps Pointing-device Driver 10.1.101.207. ApMsgFwd.exe allows the current user to map and write to the "ApMsgFwd File Mapping Object" section. ApMsgFwd.exe uses the data wr… CWE-20
 Improper Input Validation  		CVE-2018-10828 2024-11-21 12:42 2018-05-10 Show GitHub Exploit DB Packet Storm
247584 9.8 CRITICAL
Network 		annigroup 5_in_1_xvr_firmware download.rsp on ShenZhen Anni "5 in 1 XVR" devices allows remote attackers to download the configuration (without a login) to discover the password. CWE-200
Information Exposure 		CVE-2018-10770 2024-11-21 12:42 2018-05-10 Show GitHub Exploit DB Packet Storm
247585 5.5 MEDIUM
Local 		linux
debian 		linux_kernel
debian_linux 		The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2018-10940 2024-11-21 12:42 2018-05-10 Show GitHub Exploit DB Packet Storm
247586 7.8 HIGH
Local 		2345_security_guard_project 2345_security_guard In 2345 Security Guard 3.7, the driver file (2345BdPcSafe.sys, X64 version) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating … CWE-20
 Improper Input Validation  		CVE-2018-10830 2024-11-21 12:42 2018-05-9 Show GitHub Exploit DB Packet Storm
247587 7.5 HIGH
Network 		zclassic z-nomp Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by providing a solution with {x1=1,x2=1,x3=1,...,x512=1} to bypass t… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2018-10831 2024-11-21 12:42 2018-05-9 Show GitHub Exploit DB Packet Storm
247588 7.5 HIGH
Network 		litecart litecart LiteCart before 2.1.2 allows remote attackers to cause a denial of service (memory consumption) via URIs that do not exist, because public_html/logs/not_found.log grows without bound, and is loaded i… CWE-400
 Uncontrolled Resource Consumption 		CVE-2018-10827 2024-11-21 12:42 2018-05-9 Show GitHub Exploit DB Packet Storm
247589 6.1 MEDIUM
Network 		severalnines clustercontrol Severalnines ClusterControl before 1.6.0-4699 allows XSS. CWE-79
Cross-site Scripting 		CVE-2018-10817 2024-11-21 12:42 2018-05-9 Show GitHub Exploit DB Packet Storm
247590 4.1 MEDIUM
Local 		bitpie bitcoin_wallet The Bitpie application through 3.2.4 for Android and iOS uses cleartext storage for digital currency initial keys, which allows local users to steal currency by leveraging root access to read /com.bi… CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2018-10812 2024-11-21 12:42 2018-05-9 Show GitHub Exploit DB Packet Storm