Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251971	7.5	危険	Raphael Zschorsch	-	TYPO3 用の Commenting system Backend Module における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4887	2012-01-19 11:17	2010-09-2	Show	GitHub Exploit DB Packet Storm

251972	4.3	警告	Peter Proell	-	TYPO3 用の official twitter tweet button for your page におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4886	2012-01-19 11:10	2010-09-2	Show	GitHub Exploit DB Packet Storm

251973	4.3	警告	Peter Proell	-	TYPO3 用の XING Button におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4885	2012-01-19 11:09	2010-09-2	Show	GitHub Exploit DB Packet Storm

251974	7.5	危険	Hinnendahl	-	Gaestebuch の guestbook/gbook.php におけるリモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-4884	2012-01-19 11:08	2011-10-7	Show	GitHub Exploit DB Packet Storm

251975	2.6	注意	MODX	-	MODx Revolution の manager/index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4883	2012-01-19 11:06	2011-10-7	Show	GitHub Exploit DB Packet Storm

251976	4.3	警告	Ventics	-	Auto CMS の autocms.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4882	2012-01-19 11:06	2011-10-7	Show	GitHub Exploit DB Packet Storm

251977	6.8	警告	ApPHP	-	ApPHP Calendar の calendar.class.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-4881	2012-01-19 10:33	2011-10-7	Show	GitHub Exploit DB Packet Storm

251978	4.3	警告	ApPHP	-	ApPHP Calendar の calendar.class.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4880	2012-01-19 10:33	2011-10-7	Show	GitHub Exploit DB Packet Storm

251979	7.5	危険	Hinnendahl	-	Kontakt Formular の formmailer.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4878	2012-01-19 10:32	2011-10-7	Show	GitHub Exploit DB Packet Storm

251980	4.3	警告	InsaneVisions	-	OneCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4877	2012-01-19 10:31	2011-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276301	-		mcafee	data_loss_prevention_endpoint	Multiple cross-site request forgery (CSRF) vulnerabilities in the ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allow remote attackers to hijac…	CWE-352 Origin Validation Error	CVE-2015-2759	2024-11-21 11:28	2015-03-27	Show	GitHub Exploit DB Packet Storm

276302	-		mcafee	data_loss_prevention_endpoint	The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to obtain sensitive information, modify the database, or po…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-2758	2024-11-21 11:28	2015-03-27	Show	GitHub Exploit DB Packet Storm

276303	-		mcafee	data_loss_prevention_endpoint	The ePO extension in McAfee Data Loss Prevention Endpoint (DLPe) before 9.3 Patch 4 Hotfix 16 (9.3.416.4) allows remote authenticated users to cause a denial of service (database lock or license corr…	CWE-399 Resource Management Errors	CVE-2015-2757	2024-11-21 11:28	2015-03-27	Show	GitHub Exploit DB Packet Storm

276304	5.4	MEDIUM Network	netcracker	resource_management_system	Multiple cross-site scripting (XSS) vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to inject arbitrary web script or HTML via the (1) ctrl, (2) t…	CWE-79 Cross-site Scripting	CVE-2015-2207	2024-11-21 11:27	2020-02-9	Show	GitHub Exploit DB Packet Storm

276305	5.4	MEDIUM Network	synacor	zimbra_collaboration_server	Zimbra Collaboration before 8.6.0 patch5 has XSS.	CWE-79 Cross-site Scripting	CVE-2015-2249	2024-11-21 11:27	2020-01-28	Show	GitHub Exploit DB Packet Storm

276306	7.5	HIGH Network	torproject	tor	Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during periods of high DNS load, which allows remote attackers to cause a denial of service …	CWE-20 Improper Input Validation	CVE-2015-2689	2024-11-21 11:27	2020-01-25	Show	GitHub Exploit DB Packet Storm

276307	7.5	HIGH Network	torproject	tor	buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffers with invalid layouts, which allows remote attackers to cause a denial of ser…	CWE-755 Improper Handling of Exceptional Conditions	CVE-2015-2688	2024-11-21 11:27	2020-01-25	Show	GitHub Exploit DB Packet Storm

276308	5.5	MEDIUM Local	pcre opensuse mariadb php	pcre opensuse mariadb php	The pcre_compile2 function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code and cause a denial of service (out-of-bounds read) via regular expression with a group cont…	CWE-125 Out-of-bounds Read	CVE-2015-2326	2024-11-21 11:27	2020-01-15	Show	GitHub Exploit DB Packet Storm

276309	7.8	HIGH Local	pcre opensuse mariadb php	pcre opensuse mariadb php	The compile_branch function in PCRE before 8.37 allows context-dependent attackers to compile incorrect code, cause a denial of service (out-of-bounds heap read and crash), or possibly have other uns…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2015-2325	2024-11-21 11:27	2020-01-15	Show	GitHub Exploit DB Packet Storm

276310	6.1	MEDIUM Network	synacor	zimbra_collaboration_server	Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console.	CWE-79 Cross-site Scripting	CVE-2015-2230	2024-11-21 11:27	2019-05-31	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed