Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252011	4.3	警告	サイバートラスト株式会社 Apache Software Foundation レッドハット	-	Apache Subversion で利用される Apache HTTP Server における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1921	2011-07-21 09:57	2011-06-6	Show	GitHub Exploit DB Packet Storm

252012	4.3	警告	サイバートラスト株式会社 Apache Software Foundation レッドハット	-	Apache Subversion で利用される Apache HTTP Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-1783	2011-07-21 09:56	2011-06-6	Show	GitHub Exploit DB Packet Storm

252013	6.5	警告	MIT Kerberos レッドハット	-	MIT Kerberos 5 の GSS-API FTP デーモンにおけるグループのアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-1526	2011-07-20 11:17	2011-07-5	Show	GitHub Exploit DB Packet Storm

252014	6.8	警告	ヒューレット・パッカード	-	HP-UX のダイナミックローダにおける権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-2398	2011-07-20 11:14	2011-07-5	Show	GitHub Exploit DB Packet Storm

252015	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2011-2347	2011-07-20 10:52	2011-06-28	Show	GitHub Exploit DB Packet Storm

252016	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-2346	2011-07-20 10:51	2011-06-28	Show	GitHub Exploit DB Packet Storm

252017	5	警告	Google	-	Google Chrome の NPAPI 実装におけるサービス運用妨害 (out-of-bounds read) の脆弱性	CWE-119 バッファエラー	CVE-2011-2345	2011-07-20 10:50	2011-06-28	Show	GitHub Exploit DB Packet Storm

252018	7.5	危険	Google	-	Google Chrome の DOM 実装における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2342	2011-07-20 10:49	2011-06-7	Show	GitHub Exploit DB Packet Storm

252019	7.5	危険	Google	-	Google Chrome にて使用される Google V8 における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-2332	2011-07-20 10:48	2011-06-7	Show	GitHub Exploit DB Packet Storm

252020	5	警告	Google	-	Google Chrome におけるタブページにスクリプトを挿入される脆弱性	CWE-noinfo 情報不足	CVE-2011-1815	2011-07-19 10:03	2011-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
303531	-		futomi	access_analyzer_cgi	Cross-site scripting (XSS) vulnerability in futomi CGI Cafe Access Analyzer CGI Professional, and Standard 4.0.2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspec…	CWE-79 Cross-site Scripting	CVE-2010-2366	2024-11-21 10:16	2010-09-14	Show	GitHub Exploit DB Packet Storm

303532	-		linux canonical suse	linux_kernel ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop suse_linux_enterprise_high_availability_extension	The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows …	CWE-476 NULL Pointer Dereference	CVE-2010-2495	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

303533	7.8	HIGH Local	linux vmware avaya	linux_kernel esx aura_system_manager aura_communication_manager aura_system_platform aura_session_manager aura_presence_services iq aura_voice_portal	Buffer overflow in the ecryptfs_uid_hash macro in fs/ecryptfs/messaging.c in the eCryptfs subsystem in the Linux kernel before 2.6.35 might allow local users to gain privileges or cause a denial of s…	CWE-120 Classic Buffer Overflow	CVE-2010-2492	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

303534	7.8	HIGH Local	linux vmware canonical suse	linux_kernel esx ubuntu_linux suse_linux_enterprise_server suse_linux_enterprise_desktop	The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the ci…	NVD-CWE-noinfo	CVE-2010-2524	2024-11-21 10:16	2010-09-9	Show	GitHub Exploit DB Packet Storm

303535	-		linux	linux_kernel	Multiple buffer overflows in fs/nfsd/nfs4xdr.c in the XDR implementation in the NFS server in the Linux kernel before 2.6.34-rc6 allow remote attackers to cause a denial of service (panic) or possibl…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-2521	2024-11-21 10:16	2010-09-8	Show	GitHub Exploit DB Packet Storm

303536	-		linux	linux_kernel	fs/cifs/cifssmb.c in the CIFS implementation in the Linux kernel before 2.6.34-rc4 allows remote attackers to cause a denial of service (panic) via an SMB response packet with an invalid CountHigh va…	CWE-20 Improper Input Validation	CVE-2010-2248	2024-11-21 10:16	2010-09-8	Show	GitHub Exploit DB Packet Storm

303537	-		opensuse	opensuse	lxsession-logout in lxsession in LXDE, as used on SUSE openSUSE 11.3 and other platforms, does not lock the screen when the Suspend or Hibernate button is pressed, which might make it easier for phys…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-2532	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

303538	-		linux	linux_kernel	The do_anonymous_page function in mm/memory.c in the Linux kernel before 2.6.27.52, 2.6.32.x before 2.6.32.19, 2.6.34.x before 2.6.34.4, and 2.6.35.x before 2.6.35.2 does not properly separate the st…	CWE-94 Code Injection	CVE-2010-2240	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

303539	-		linux suse debian canonical	linux_kernel linux_enterprise_server linux_enterprise_desktop linux_enterprise_software_development_kit debian_linux ubuntu_linux	The xfs_swapext function in fs/xfs/xfs_dfrag.c in the Linux kernel before 2.6.35 does not properly check the file descriptors passed to the SWAPEXT ioctl, which allows local users to leverage write a…	CWE-200 Information Exposure	CVE-2010-2226	2024-11-21 10:16	2010-09-4	Show	GitHub Exploit DB Packet Storm

303540	-		common1	moobbs2	Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2010-2365	2024-11-21 10:16	2010-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed