Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252211	10	危険	ターボリナックス ProFTPD Project	-	ProFTPD の pr_netio_telnet_get 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4221	2010-12-22 15:20	2010-10-29	Show	GitHub Exploit DB Packet Storm

252212	7.1	危険	サイバートラスト株式会社 ProFTPD Project ターボリナックス	-	ProFTPD の mod_site_misc モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-3867	2010-12-22 15:19	2010-10-29	Show	GitHub Exploit DB Packet Storm

252213	9.3	危険	Mozilla Foundation オラクル	-	複数の Mozilla 製品のブラウザエンジンにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3174	2010-12-22 15:16	2010-10-19	Show	GitHub Exploit DB Packet Storm

252214	4.3	警告	Mozilla Foundation オラクル	-	複数の Mozilla 製品の SafeJSObjectWrapper 実装における同一生成元ポリシーを回避される脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2763	2010-12-22 15:15	2010-09-7	Show	GitHub Exploit DB Packet Storm

252215	4.3	警告	ISC, Inc. レッドハット	-	ISC DHCP サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2010-3611	2010-12-22 14:25	2010-11-2	Show	GitHub Exploit DB Packet Storm

252216	5	警告	Wireshark	-	Wireshark の ZigBee ZCL 解析部の epan/dissectors/packet-zbee-zcl.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-4301	2010-12-22 14:20	2010-11-18	Show	GitHub Exploit DB Packet Storm

252217	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品におけるクロスサイトスクリプティングを誘導される脆弱性	CWE-20 不適切な入力確認	CVE-2010-1210	2010-12-21 16:14	2010-07-20	Show	GitHub Exploit DB Packet Storm

252218	4.3	警告	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	複数の Mozilla 製品の XMLDocument::load 関数におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2010-0182	2010-12-21 16:11	2010-03-30	Show	GitHub Exploit DB Packet Storm

252219	9.3	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0179	2010-12-21 16:10	2010-03-30	Show	GitHub Exploit DB Packet Storm

252220	7.6	危険	サイバートラスト株式会社 Mozilla Foundation レッドハットオラクル	-	Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-0178	2010-12-21 16:09	2010-03-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294001	-		realnetworks	realplayer realplayer_sp	rvrender.dll in RealNetworks RealPlayer 11.x, 14.x, and 15.x before 15.02.71, and RealPlayer SP 1.0 through 1.1.5, allows remote attackers to execute arbitrary code via crafted flags in an RMFF file.	CWE-94 Code Injection	CVE-2012-0922	2024-11-21 10:35	2012-02-9	Show	GitHub Exploit DB Packet Storm

294002	-		php	php	The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handl…	CWE-399 Resource Management Errors	CVE-2012-0830	2024-11-21 10:35	2012-02-7	Show	GitHub Exploit DB Packet Storm

294003	-		todd_miller	sudo	Format string vulnerability in the sudo_debug function in Sudo 1.8.0 through 1.8.3p1 allows local users to execute arbitrary code via format string sequences in the program name for sudo.	CWE-134 Use of Externally-Controlled Format String	CVE-2012-0809	2024-11-21 10:35	2012-02-1	Show	GitHub Exploit DB Packet Storm

294004	-		samba	samba	Memory leak in smbd in Samba 3.6.x before 3.6.3 allows remote attackers to cause a denial of service (memory and CPU consumption) by making many connection requests.	CWE-200 Information Exposure	CVE-2012-0817	2024-11-21 10:35	2012-01-31	Show	GitHub Exploit DB Packet Storm

294005	-		wordpress	wordpress	Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier allow remote attackers to inject arbitrary web script or …	CWE-79 Cross-site Scripting	CVE-2012-0782	2024-11-21 10:35	2012-01-31	Show	GitHub Exploit DB Packet Storm

294006	-		acidcat	acidcat_cms	Multiple cross-site scripting (XSS) vulnerabilities in Acidcat CMS 3.5.1, 3.5.2, 3.5.6, and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) adm…	CWE-79 Cross-site Scripting	CVE-2012-0933	2024-11-21 10:35	2012-01-29	Show	GitHub Exploit DB Packet Storm

294007	-		leadcapturepagesystem	lead_capture_page_system	Cross-site scripting (XSS) vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter.	CWE-79 Cross-site Scripting	CVE-2012-0932	2024-11-21 10:35	2012-01-29	Show	GitHub Exploit DB Packet Storm

294008	9.8	CRITICAL Network	schneider-electric	modicon_quantum_plc	Schneider Electric Modicon Quantum PLC does not perform authentication between the Unity software and PLC, which allows remote attackers to cause a denial of service or possibly execute arbitrary cod…	CWE-287 Improper Authentication	CVE-2012-0931	2024-11-21 10:35	2012-01-28	Show	GitHub Exploit DB Packet Storm

294009	6.1	MEDIUM Network	schneider-electric	modicon_quantum_plc	Cross-site scripting (XSS) vulnerability in Schneider Electric Modicon Quantum PLC allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2012-0930	2024-11-21 10:35	2012-01-28	Show	GitHub Exploit DB Packet Storm

294010	7.5	HIGH Network	schneider-electric	modicon_quantum_plc	Multiple buffer overflows in Schneider Electric Modicon Quantum PLC allow remote attackers to cause a denial of service via malformed requests to the (1) FTP server or (2) HTTP server.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2012-0929	2024-11-21 10:35	2012-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed