Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252131	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-2997	2011-01-7 15:33	2010-12-10	Show	GitHub Exploit DB Packet Storm

252132	2.6	注意	アップルサイバートラスト株式会社レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2009-2964	2011-01-7 11:03	2009-08-12	Show	GitHub Exploit DB Packet Storm

252133	4.3	警告	レッドハット SquirrelMail Project	-	SquirrelMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-1262	2011-01-7 11:02	2007-05-9	Show	GitHub Exploit DB Packet Storm

252134	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer のマルチレートオーディオにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4375	2011-01-6 16:23	2010-12-10	Show	GitHub Exploit DB Packet Storm

252135	9.3	危険	レッドハットリアルネットワークス	-	RealNetworks RealPlayer の RealMedia メディアプロパティーヘッダーにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2010-4384	2011-01-6 16:18	2010-12-10	Show	GitHub Exploit DB Packet Storm

252136	4.3	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の nsAuthSSPI::Unwrap 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-0161	2011-01-6 16:01	2010-03-16	Show	GitHub Exploit DB Packet Storm

252137	9.3	危険	Exim Development レッドハット	-	Exim の string_format 関数にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4344	2011-01-6 15:58	2010-12-14	Show	GitHub Exploit DB Packet Storm

252138	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey のレンダリングエンジンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3770	2011-01-6 15:50	2010-12-9	Show	GitHub Exploit DB Packet Storm

252139	4.3	警告	Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey におけるロケーションバーを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2010-3774	2011-01-6 15:17	2010-12-9	Show	GitHub Exploit DB Packet Storm

252140	6.8	警告	サイバートラスト株式会社 Mozilla Foundation レッドハット	-	Mozilla Firefox および SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-DesignError	CVE-2010-3773	2011-01-6 15:15	2010-12-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
270891	8.8	HIGH Network	pfizer	symbiq_infusion_system_firmware	Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly e…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-3965	2024-11-21 11:30	2019-03-24	Show	GitHub Exploit DB Packet Storm

270892	9.8	CRITICAL Network	connx	esp_hr_management	SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx.	CWE-89 SQL Injection	CVE-2015-4043	2024-11-21 11:30	2018-06-20	Show	GitHub Exploit DB Packet Storm

270893	8.8	HIGH Network	vestacp	control_panel	Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup parameter to list/backup/index.php.	CWE-78 OS Command	CVE-2015-4117	2024-11-21 11:30	2018-03-1	Show	GitHub Exploit DB Packet Storm

270894	6.1	MEDIUM Network	bonitasoft	bonita_bpm_portal	Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors involving the redirec…	CWE-601 Open Redirect	CVE-2015-3898	2024-11-21 11:30	2018-03-1	Show	GitHub Exploit DB Packet Storm

270895	8.8	HIGH Network	codestyling_localization_project	codestyling_localization	Multiple cross-site request forgery (CSRF) vulnerabilities in the Codestyling Localization plugin 1.99.30 and earlier for Wordpress.	CWE-352 Origin Validation Error	CVE-2015-4179	2024-11-21 11:30	2018-02-6	Show	GitHub Exploit DB Packet Storm

270896	7.5	HIGH Network	jolla	sailfish_os	Jolla Sailfish OS before 1.1.2.16 allows remote attackers to spoof phone numbers and trigger calls to arbitrary numbers via spaces in a tel: URL.	CWE-284 Improper Access Control	CVE-2015-3888	2024-11-21 11:30	2018-01-13	Show	GitHub Exploit DB Packet Storm

270897	6.8	MEDIUM Network	puppet	puppet_enterprise	Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client certificate trusted by the master, aka a "Certificate Author…	CWE-295 Improper Certificate Validation	CVE-2015-4100	2024-11-21 11:30	2017-12-22	Show	GitHub Exploit DB Packet Storm

270898	9.8	CRITICAL Network	fiyo	fiyo_cms	Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/app_article/controller/rating.php or (2) user pa…	CWE-89 SQL Injection	CVE-2015-3934	2024-11-21 11:30	2017-11-22	Show	GitHub Exploit DB Packet Storm

270899	9.8	CRITICAL Network	metalgenix	genixcms	Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) …	CWE-89 SQL Injection	CVE-2015-3933	2024-11-21 11:30	2017-11-9	Show	GitHub Exploit DB Packet Storm

270900	7.8	HIGH Local	proxychains-ng_project	proxychains-ng	Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referen…	CWE-426 Untrusted Search Path	CVE-2015-3887	2024-11-21 11:30	2017-09-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed