Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251581	7.5	危険	Geeklog	-	Geeklog の filemgmt/singlefile.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4933	2012-02-28 15:48	2011-10-9	Show	GitHub Exploit DB Packet Storm

251582	4.3	警告	Khader Abbeb	-	Entrans の search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4932	2012-02-28 15:47	2011-10-9	Show	GitHub Exploit DB Packet Storm

251583	4.3	警告	atmail pty ltd	-	Atmail Webmail の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4930	2012-02-28 14:27	2011-10-9	Show	GitHub Exploit DB Packet Storm

251584	7.5	危険	Joostina CMS	-	Joomla! 用 Joostina コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4929	2012-02-28 14:09	2011-10-9	Show	GitHub Exploit DB Packet Storm

251585	4.3	警告	PhotoIndochina	-	Joomla! 用 Restaurant Guide コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4928	2012-02-28 14:07	2011-10-9	Show	GitHub Exploit DB Packet Storm

251586	7.5	危険	PhotoIndochina	-	Joomla! 用 Restaurant Guide コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4927	2012-02-28 13:57	2011-10-9	Show	GitHub Exploit DB Packet Storm

251587	7.5	危険	TimeTrack	-	Joomla! 用 TimeTrack コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4926	2012-02-28 13:53	2011-10-9	Show	GitHub Exploit DB Packet Storm

251588	7.5	危険	Nuked-Klan	-	Nuked-Klan 用 Partenaires モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4925	2012-02-28 13:40	2011-10-9	Show	GitHub Exploit DB Packet Storm

251589	7.5	危険	Virtue Netz	-	Virtue Netz Virtue Book Store における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4923	2012-02-28 13:39	2011-10-9	Show	GitHub Exploit DB Packet Storm

251590	7.5	危険	Allinta	-	Allinta CMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4922	2012-02-28 11:20	2011-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276661	-	mozilla novell opensuse	thunderbird firefox_esr firefox suse_linux_enterprise_server suse_linux_enterprise_desktop opensuse suse_linux_enterprise_software_development_kit	Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code via cr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-2710	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

276662	-	mozilla novell opensuse	firefox suse_linux_enterprise_server suse_linux_enterprise_desktop opensuse suse_linux_enterprise_software_development_kit	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe…	NVD-CWE-noinfo	CVE-2015-2709	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

276663	-	novell opensuse mozilla	suse_linux_enterprise_server suse_linux_enterprise_desktop opensuse suse_linux_enterprise_software_development_kit firefox thunderbird firefox_esr	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allow remote attackers to cause a denial of servic…	NVD-CWE-noinfo	CVE-2015-2708	2024-11-21 11:27	2015-05-14	Show	GitHub Exploit DB Packet Storm

276664	-	clamav canonical	clamav ubuntu_linux	ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted xz archive file.	CWE-399 Resource Management Errors	CVE-2015-2668	2024-11-21 11:27	2015-05-13	Show	GitHub Exploit DB Packet Storm

276665	-	lenovo	system_update	Race condition in Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses world-writable permissions for the update files directory, which allows local users to gain privileg…	CWE-362 Race Condition	CVE-2015-2234	2024-11-21 11:27	2015-05-13	Show	GitHub Exploit DB Packet Storm

276666	-	lenovo	system_update	Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and ex…	CWE-310 Cryptographic Issues	CVE-2015-2233	2024-11-21 11:27	2015-05-13	Show	GitHub Exploit DB Packet Storm

276667	-	canonical clamav	ubuntu_linux clamav	ClamAV before 0.98.7 allows remote attackers to cause a denial of service (crash) via a crafted petite packed file.	CWE-399 Resource Management Errors	CVE-2015-2222	2024-11-21 11:27	2015-05-13	Show	GitHub Exploit DB Packet Storm

276668	-	clamav canonical	clamav ubuntu_linux	ClamAV before 0.98.7 allows remote attackers to cause a denial of service (infinite loop) via a crafted y0da cryptor file.	CWE-399 Resource Management Errors	CVE-2015-2221	2024-11-21 11:27	2015-05-13	Show	GitHub Exploit DB Packet Storm

276669	-	lenovo	system_update	Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to th…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-2219	2024-11-21 11:27	2015-05-13	Show	GitHub Exploit DB Packet Storm

276670	-	huawei	seq_analyst	Cross-site scripting (XSS) vulnerability in Huawei SEQ Analyst before V200R002C03LG0001CP0022 allows remote attackers to inject arbitrary web script or HTML via the command XML element in the req par…	CWE-79 Cross-site Scripting	CVE-2015-2347	2024-11-21 11:27	2015-05-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed