Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 11, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252211	9.3	危険	The GIMP Team レッドハット	-	GIMP の SPHERE DESIGNER プラグインにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4541	2011-06-13 14:42	2011-01-7	Show	GitHub Exploit DB Packet Storm

252212	6.8	警告	The GIMP Team レッドハット	-	GIMP の "LIGHTING EFFECTS > LIGHT" プラグインにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4540	2011-06-13 14:41	2011-01-7	Show	GitHub Exploit DB Packet Storm

252213	10	危険	ISC, Inc. サイバートラスト株式会社ターボリナックスインターネットイニシアティブセンチュリー・システムズレッドハット	-	ISC DHCP dhclient におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2009-0692	2011-06-10 10:04	2009-07-15	Show	GitHub Exploit DB Packet Storm

252214	5	警告	ISC, Inc. ターボリナックス	-	ISC DHCP にサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2010-3616	2011-06-10 10:04	2010-12-14	Show	GitHub Exploit DB Packet Storm

252215	7.2	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の do_anonymous_page 関数における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-2240	2011-06-10 10:03	2010-08-30	Show	GitHub Exploit DB Packet Storm

252216	7.2	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の gdth_read_event 関数における権限昇格の脆弱性	CWE-Other その他	CVE-2009-3080	2011-06-10 10:03	2009-11-20	Show	GitHub Exploit DB Packet Storm

252217	7.1	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の net/ipv4/tcp_input.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1188	2011-06-10 10:02	2010-03-30	Show	GitHub Exploit DB Packet Storm

252218	7.8	危険	サイバートラスト株式会社 VMware Linux レッドハット	-	Linux kernel の e1000 ドライバにおけるパケットフィルタの制限を回避される脆弱性	CWE-189 数値処理の問題	CVE-2009-4536	2011-06-10 10:02	2010-01-12	Show	GitHub Exploit DB Packet Storm

252219	9.3	危険	Google	-	Google Chrome にて使用される WebKit の WebCore における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-1772	2011-06-10 09:57	2010-06-8	Show	GitHub Exploit DB Packet Storm

252220	6.8	警告	Google	-	Google Chrome にて使用される WebKit の WebCore におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2010-1767	2011-06-10 09:57	2010-04-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
300771	-	senkas	kolibri	Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a HEAD request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-5301	2024-11-21 10:22	2014-06-13	Show	GitHub Exploit DB Packet Storm

300772	-	jzip	jzip	Stack-based buffer overflow in Jzip 1.3 through 2.0.0.132900 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long file name in a zip archive.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-5300	2024-11-21 10:22	2014-06-11	Show	GitHub Exploit DB Packet Storm

300773	-	microp_project	microp	Stack-based buffer overflow in MicroP 0.1.1.1600 allows remote attackers to execute arbitrary code via a crafted .mppl file. NOTE: it has been reported that the overflow is in the lpFileName paramet…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2010-5299	2024-11-21 10:22	2014-05-23	Show	GitHub Exploit DB Packet Storm

300774	-	fedoraproject randall_hand	fedora yerase\'s_tnef_stream_reader	Off-by-one error in the DecompressRTF function in ytnef.c in Yerase's TNEF Stream Reader allows remote attackers to cause a denial of service (crash) via a crafted TNEF file, which triggers a buffer …	CWE-189 Numeric Errors	CVE-2010-5109	2024-11-21 10:22	2014-05-6	Show	GitHub Exploit DB Packet Storm

300775	-	blender	blender	The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue mi…	CWE-59 Link Following	CVE-2010-5105	2024-11-21 10:22	2014-04-28	Show	GitHub Exploit DB Packet Storm

300776	-	openssl mariadb fedoraproject suse	openssl mariadb fedora linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_desktop linux_enterprise_workstation_extension	Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denia…	CWE-362 Race Condition	CVE-2010-5298	2024-11-21 10:22	2014-04-15	Show	GitHub Exploit DB Packet Storm

300777	-	wordpress	wordpress	WordPress before 3.0.1, when a Multisite installation is used, permanently retains the "site administrators can add users" option once changed, which might allow remote authenticated administrators t…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-5297	2024-11-21 10:22	2014-01-21	Show	GitHub Exploit DB Packet Storm

300778	-	wordpress	wordpress	wp-includes/capabilities.php in WordPress before 3.0.2, when a Multisite configuration is used, does not require the Super Admin role for the delete_users capability, which allows remote authenticate…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2010-5296	2024-11-21 10:22	2014-01-21	Show	GitHub Exploit DB Packet Storm

300779	-	wordpress	wordpress	Cross-site scripting (XSS) vulnerability in wp-admin/plugins.php in WordPress before 3.0.2 might allow remote attackers to inject arbitrary web script or HTML via a plugin's author field, which is no…	CWE-79 Cross-site Scripting	CVE-2010-5295	2024-11-21 10:22	2014-01-21	Show	GitHub Exploit DB Packet Storm

300780	-	wordpress	wordpress	Multiple cross-site scripting (XSS) vulnerabilities in the request_filesystem_credentials function in wp-admin/includes/file.php in WordPress before 3.0.2 allow remote servers to inject arbitrary web…	CWE-79 Cross-site Scripting	CVE-2010-5294	2024-11-21 10:22	2014-01-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed