Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252091	9.3	危険	サン・マイクロシステムズアドビシステムズ日本電気マイクロソフト OpenOffice.org Project	-	Microsoft Visual Studio の ATL におけるオブジェクトのインスタンス化処理に関する任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2009-2493	2011-01-14 14:32	2009-07-28	Show	GitHub Exploit DB Packet Storm

252092	9.3	危険	マイクロソフトアドビシステムズ日本電気	-	Microsoft Visual Studio の ATL における未初期化オブジェクト処理に関する任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2009-0901	2011-01-14 14:31	2009-07-28	Show	GitHub Exploit DB Packet Storm

252093	6.9	警告	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2010-3957	2011-01-13 16:22	2010-12-14	Show	GitHub Exploit DB Packet Storm

252094	9.3	危険	マイクロソフト	-	Microsoft Windows の OpenType Font ドライバにおける権限昇格の脆弱性	CWE-94 コード・インジェクション	CVE-2010-3956	2011-01-13 16:19	2010-12-14	Show	GitHub Exploit DB Packet Storm

252095	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3346	2011-01-13 16:15	2010-12-14	Show	GitHub Exploit DB Packet Storm

252096	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3345	2011-01-13 16:11	2010-12-14	Show	GitHub Exploit DB Packet Storm

252097	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3343	2011-01-13 15:48	2010-12-14	Show	GitHub Exploit DB Packet Storm

252098	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3340	2011-01-13 15:43	2010-12-14	Show	GitHub Exploit DB Packet Storm

252099	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Advanced Audio Coding におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4395	2011-01-12 15:29	2010-12-10	Show	GitHub Exploit DB Packet Storm

252100	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の RealPix におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4394	2011-01-12 15:23	2010-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
249311	5.3	MEDIUM Network	frogman_office_inc	cs-cart	CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4.3.10 and earlier (excluding v2 and v3) allows remote attackers to bypass access restriction…	CWE-425 Direct Request ('Forced Browsing')	CVE-2017-2139	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249312	3.7	LOW Network	netgear	prosafe_plus_configuration_utility	ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests.	NVD-CWE-noinfo	CVE-2017-2137	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249313	6.1	MEDIUM Network	wp_statistics	wp_statistics	Cross-site scripting vulnerability in WP Statistics version 12.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via specially crafted HTTP Referer headers.	CWE-79 Cross-site Scripting	CVE-2017-2136	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249314	6.1	MEDIUM Network	wp-statistics	wp_statistics	Cross-site scripting vulnerability in WP Statistics version 12.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2017-2135	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249315	6.1	MEDIUM Network	uchida	assetbase	Cross-site scripting vulnerability in ASSETBASE 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2017-2134	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249316	7.8	HIGH Local	securebrain	phishwall_client	Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unsp…	CWE-426 Untrusted Search Path	CVE-2017-2130	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249317	8.8	HIGH Network	information-technology_promotion_agency	introduction_to_safe_website_operation	Security guide for website operators allows remote attackers to execute arbitrary OS commands via specially crafted saved data.	CWE-78 OS Command	CVE-2017-2128	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249318	5.4	MEDIUM Network	yop-poll	yop_poll	Cross-site scripting vulnerability in YOP Poll versions prior to 5.8.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2017-2127	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249319	8.8	HIGH Network	allied_telesis_k.k.	centrecom_ar260s_v2_firmware	Privilege escalation vulnerability in CentreCOM AR260S V2 remote authenticated attackers to gain privileges via the guest account.	NVD-CWE-noinfo	CVE-2017-2125	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

249320	6.1	MEDIUM Network	onethird	onethird_cms	Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven's Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.	CWE-79 Cross-site Scripting	CVE-2017-2124	2024-11-21 12:22	2017-04-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed