Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 11, 2026, 12:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252221 10 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2010-3117 2011-06-10 09:54 2010-08-19 Show GitHub Exploit DB Packet Storm
252222 10 危険 シスコシステムズ - Cisco Wireless LAN Controller における設定を変更される脆弱性 CWE-noinfo
情報不足 		CVE-2009-1167 2011-06-10 09:53 2009-07-27 Show GitHub Exploit DB Packet Storm
252223 7.8 危険 シスコシステムズ - Cisco Wireless LAN Controller の管理用 Web インターフェースにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2009-1166 2011-06-10 09:53 2009-07-27 Show GitHub Exploit DB Packet Storm
252224 6.8 警告 Redback
Apache Software Foundation		 - Apache Archiva および Apache Continuum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2010-3449 2011-06-10 09:53 2010-11-24 Show GitHub Exploit DB Packet Storm
252225 5 警告 JSecurity
Apache Software Foundation		 - Apache Shiro および JSecurity におけるアクセス制限を回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2010-3863 2011-06-10 09:52 2010-11-5 Show GitHub Exploit DB Packet Storm
252226 4.3 警告 Apache Software Foundation - Apache CouchDB の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-3854 2011-06-10 09:52 2011-01-28 Show GitHub Exploit DB Packet Storm
252227 4.3 警告 The Dojo Foundation
Apache Software Foundation		 - Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6726 2011-06-10 09:51 2009-04-9 Show GitHub Exploit DB Packet Storm
252228 4.3 警告 Apache Software Foundation - Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-1548 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
252229 7.8 危険 Apache Software Foundation - Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2006-1547 2011-06-10 09:50 2006-03-30 Show GitHub Exploit DB Packet Storm
252230 4.3 警告 Apache Software Foundation
レッドハット		 - Apache Struts におけるクロスサイトスクリプティングの脆弱性 - CVE-2005-3745 2011-06-10 09:49 2005-11-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287171 - novell zenworks_configuration_management Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a preboot update … CWE-22
Path Traversal 		CVE-2013-3706 2024-11-21 10:54 2014-03-6 Show GitHub Exploit DB Packet Storm
287172 - ibm websphere_mq Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI. CWE-22
Path Traversal 		CVE-2013-4054 2024-11-21 10:54 2014-03-2 Show GitHub Exploit DB Packet Storm
287173 - suse studio_onsite
studio_extension_for_system_z 		SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has unspecified impact and vectors. CWE-310
Cryptographic Issues 		CVE-2013-3712 2024-11-21 10:54 2014-02-27 Show GitHub Exploit DB Packet Storm
287174 - ibm sametime The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2013-3988 2024-11-21 10:54 2014-02-14 Show GitHub Exploit DB Packet Storm
287175 - ibm sametime The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attac… CWE-20
 Improper Input Validation  		CVE-2013-3983 2024-11-21 10:54 2014-02-14 Show GitHub Exploit DB Packet Storm
287176 - ibm sametime The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to prevent unwanted caching by a web browser, which allows remote … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3978 2024-11-21 10:54 2014-02-14 Show GitHub Exploit DB Packet Storm
287177 - maxxmarketing joomshopping Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name par… CWE-79
Cross-site Scripting 		CVE-2013-3933 2024-11-21 10:54 2014-02-12 Show GitHub Exploit DB Packet Storm
287178 - xaraya xaraya Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmod… CWE-79
Cross-site Scripting 		CVE-2013-3639 2024-11-21 10:54 2014-02-6 Show GitHub Exploit DB Packet Storm
287179 - ibm spss_collaboration_and_deployment_services The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP… CWE-200
Information Exposure 		CVE-2013-4043 2024-11-21 10:54 2014-02-2 Show GitHub Exploit DB Packet Storm
287180 - springsource
vmware 		spring_framework The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary fi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4152 2024-11-21 10:54 2014-01-24 Show GitHub Exploit DB Packet Storm