Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251361	7.5	危険	Maulana Al Matien	-	ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4998	2011-12-9 14:18	2011-11-2	Show	GitHub Exploit DB Packet Storm

251362	7.5	危険	Joe Pieruccini	-	MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5000	2011-12-9 14:17	2011-11-2	Show	GitHub Exploit DB Packet Storm

251363	7.5	危険	2daybiz	-	2daybiz Polls Script の searchvote.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5004	2011-12-9 14:16	2011-11-2	Show	GitHub Exploit DB Packet Storm

251364	4.3	警告	Rayzz	-	Rayzz Photoz の members/profileCommentsResponse.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5005	2011-12-9 14:15	2011-11-2	Show	GitHub Exploit DB Packet Storm

251365	7.5	危険	Emophp Programming	-	EMO Realty Manager の googlemap/index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5006	2011-12-9 14:15	2011-11-2	Show	GitHub Exploit DB Packet Storm

251366	4.3	警告	ut-files	-	UTStats の pages/match_report.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5007	2011-12-9 14:14	2011-11-2	Show	GitHub Exploit DB Packet Storm

251367	7.5	危険	Denali	-	BrightSuite Groupware における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5008	2011-12-9 14:13	2011-11-2	Show	GitHub Exploit DB Packet Storm

251368	7.5	危険	ut-files	-	UTStats の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5009	2011-12-9 14:12	2011-11-2	Show	GitHub Exploit DB Packet Storm

251369	4.3	警告	FullSite Pty Ltd	-	SchoolMation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5010	2011-12-9 14:10	2011-11-2	Show	GitHub Exploit DB Packet Storm

251370	7.5	危険	FullSite Pty Ltd	-	SchoolMation における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-5011	2011-12-9 14:10	2011-11-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
305571	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003 windows_2003_server	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not prop…	CWE-20 Improper Input Validation	CVE-2010-1897	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305572	-	microsoft	windows_server_2008 windows_xp windows_vista windows_server_2003 windows_2003_server	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate us…	CWE-20 Improper Input Validation	CVE-2010-1896	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305573	-	microsoft	windows_xp windows_server_2003 windows_2003_server	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode data to kernel mode,…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1895	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305574	-	microsoft	windows_xp windows_server_2003 windows_2003_server	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local users to gain privile…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-1894	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305575	-	microsoft	windows_server_2008 windows_7 windows_vista	Integer overflow in the TCP/IP stack in Microsoft Windows Vista SP1, Windows Server 2008 Gold and R2, and Windows 7 allows local users to gain privileges via a buffer of user-mode data that is copied…	CWE-189 Numeric Errors	CVE-2010-1893	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305576	-	microsoft	windows_server_2008 windows_7 windows_vista	The TCP/IP stack in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly handle malformed IPv6 packets, which allows remote attackers to cause a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-1892	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305577	-	microsoft	windows_server_2008 windows_7 windows_vista	The kernel in Microsoft Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate ACLs on kernel objects, which allows local users to cause a denial o…	CWE-20 Improper Input Validation	CVE-2010-1890	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305578	-	microsoft	windows_server_2008 windows_vista	Double free vulnerability in the kernel in Microsoft Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2, allows local users to gain privileges via a crafted application, related to objec…	CWE-399 Resource Management Errors	CVE-2010-1889	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305579	-	microsoft	windows_xp	Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."	CWE-362 Race Condition	CVE-2010-1888	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

305580	-	microsoft	windows_server_2008 windows_xp windows_7 windows_vista windows_server_2003 windows_2003_server	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not prop…	CWE-20 Improper Input Validation	CVE-2010-1887	2024-11-21 10:15	2010-08-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed