Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252031	7.2	危険	GNU Project VMware サイバートラスト株式会社レッドハット	-	GNU C library の ld.so における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3856	2011-01-25 15:48	2010-10-25	Show	GitHub Exploit DB Packet Storm

252032	5.8	警告	Mozilla Foundation オラクル	-	Mozilla Firefox の JavaScript 実装内にある js_InitRandom 関数におけるシード値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-3400	2011-01-25 15:15	2010-09-15	Show	GitHub Exploit DB Packet Storm

252033	4.3	警告	Mozilla Foundation オラクル	-	Mozilla Firefox におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-2117	2011-01-25 15:13	2010-06-1	Show	GitHub Exploit DB Packet Storm

252034	6.8	警告	アップル	-	Apple Mac OS X における脆弱性に対するアップデート	CWE-134 書式文字列の問題	CVE-2010-4013	2011-01-25 15:10	2011-01-7	Show	GitHub Exploit DB Packet Storm

252035	5	警告	GNU Project	-	GNU C Library の regcomp 実装におけるスタック消費の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4052	2011-01-21 16:37	2011-01-13	Show	GitHub Exploit DB Packet Storm

252036	5	警告	GNU Project	-	GNU C Library の regcomp 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-4051	2011-01-21 16:35	2011-01-13	Show	GitHub Exploit DB Packet Storm

252037	-	-	（複数のベンダ）	-	侵入検知システム (IDS) および侵入防止システム (IPS) の機能を回避可能な問題	-	-	2011-01-21 16:30	2010-12-16	Show	GitHub Exploit DB Packet Storm

252038	6.9	警告	Ecava	-	Ecava IntegraXor における権限昇格の脆弱性	CWE-Other その他	CVE-2010-4599	2011-01-21 15:52	2010-12-17	Show	GitHub Exploit DB Packet Storm

252039	5	警告	Ecava	-	Ecava IntegraXor におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4598	2011-01-21 15:38	2011-01-12	Show	GitHub Exploit DB Packet Storm

252040	6.8	警告	Lunascape	-	Lunascape における DLL 読み込みに関する脆弱性	CWE-Other その他	CVE-2010-3927	2011-01-21 11:02	2011-01-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292021	-	ibm	tivoli_asset_management_for_it maximo_asset_management smartcloud_control_desk change_and_configuration_management_database maximo_service_desk tivoli_service_request_manager	Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 7.5, as used in SmartCloud Control Desk, Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Ser…	CWE-79 Cross-site Scripting	CVE-2012-3313	2024-11-21 10:40	2012-09-11	Show	GitHub Exploit DB Packet Storm

292022	-	hp	business_availability_center	HP Business Availability Center (BAC) 8.07 allows remote authenticated users to hijack web sessions via unspecified vectors.	NVD-CWE-noinfo	CVE-2012-3257	2024-11-21 10:40	2012-09-8	Show	GitHub Exploit DB Packet Storm

292023	-	hp	business_availability_center	Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.	CWE-352 Origin Validation Error	CVE-2012-3256	2024-11-21 10:40	2012-09-8	Show	GitHub Exploit DB Packet Storm

292024	-	hp	business_availability_center	Cross-site scripting (XSS) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-3255	2024-11-21 10:40	2012-09-8	Show	GitHub Exploit DB Packet Storm

292025	-	realflex	realwin flexview realwindemo	Multiple untrusted search path vulnerabilities in RealFlex RealWin before 2.1.13, FlexView before 3.1.86, and RealWinDemo before 2.1.13 allow local users to gain privileges via a Trojan horse (1) rea…	NVD-CWE-Other	CVE-2012-3004	2024-11-21 10:40	2012-09-8	Show	GitHub Exploit DB Packet Storm

292026	-	wago	wago_i\/o_system_758_industrial_pc_device	WAGO I/O System 758 model 758-870, 758-874, 758-875, and 758-876 Industrial PC (IPC) devices have default passwords for unspecified Web Based Management accounts, which makes it easier for remote att…	CWE-255 Credentials Management	CVE-2012-3013	2024-11-21 10:40	2012-09-7	Show	GitHub Exploit DB Packet Storm

292027	-	arbiter	power_sentinel_1133a_firmware power_sentinel	The Arbiter Power Sentinel 1133A device with firmware before 11Jun2012 Rev 421 allows remote attackers to cause a denial of service (Ethernet outage) via unspecified Ethernet traffic that fills a buf…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-3012	2024-11-21 10:40	2012-09-6	Show	GitHub Exploit DB Packet Storm

292028	-	garrettcom	magnum_managed_networks_software-6k magnum_managed_networks_software-6k_secure	The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileg…	CWE-255 Credentials Management	CVE-2012-3014	2024-11-21 10:40	2012-09-4	Show	GitHub Exploit DB Packet Storm

292029	-	pizzashack	rssh	rssh 2.3.3 and earlier allows local users to bypass intended restricted shell access via crafted environment variables in the command line.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2012-3478	2024-11-21 10:40	2012-09-1	Show	GitHub Exploit DB Packet Storm

292030	-	wargio	naxsi	Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.	CWE-22 Path Traversal	CVE-2012-3380	2024-11-21 10:40	2012-09-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed