Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252261	6.4	警告	ヒューレット・パッカードレッドハット日立オラクル	-	Oracle Sun Products Suite の Oracle Communications Messaging Server コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2010-3564	2010-12-16 15:22	2010-10-12	Show	GitHub Exploit DB Packet Storm

252262	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-DesignError	CVE-2010-3817	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

252263	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3816	2010-12-16 14:18	2010-11-22	Show	GitHub Exploit DB Packet Storm

252264	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2010-3811	2010-12-16 14:16	2010-11-22	Show	GitHub Exploit DB Packet Storm

252265	5	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP のセッションシリアライザにおける任意のセッション変数に変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3065	2010-12-15 15:28	2010-05-31	Show	GitHub Exploit DB Packet Storm

252266	5	警告	日立	-	JP1/NETM 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	-	2010-12-15 15:27	2010-07-30	Show	GitHub Exploit DB Packet Storm

252267	5	警告	The PHP Group サイバートラスト株式会社ターボリナックスレッドハット	-	PHP におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2010-1917	2010-12-15 15:27	2010-05-11	Show	GitHub Exploit DB Packet Storm

252268	5	警告	The PHP Group アップルターボリナックスサイバートラスト株式会社レッドハット	-	PHP の xmlrpc 拡張におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2010-0397	2010-12-15 15:27	2010-03-16	Show	GitHub Exploit DB Packet Storm

252269	6.4	警告	The PHP Group サイバートラスト株式会社レッドハット	-	PHP の Linear Congruential Generator における値を推測される脆弱性	CWE-310 暗号の問題	CVE-2010-1128	2010-12-15 15:26	2010-03-26	Show	GitHub Exploit DB Packet Storm

252270	6.9	警告	GNU Project 日本電気ターボリナックスサイバートラスト株式会社レッドハット	-	GNU Libtool の libltdl における権限昇格の脆弱性	CWE-DesignError	CVE-2009-3736	2010-12-15 15:26	2009-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 4, 2026, 4:06 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
300121	-		awstats	awstats	Directory traversal vulnerability in AWStats before 7.0 allows remote attackers to have an unspecified impact via a crafted LoadPlugin directory.	CWE-22 Path Traversal	CVE-2010-4369	2024-11-21 10:20	2010-12-3	Show	GitHub Exploit DB Packet Storm

300122	-		awstats	awstats	awstats.cgi in AWStats before 7.0 on Windows accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located at a UNC sh…	CWE-94 Code Injection	CVE-2010-4368	2024-11-21 10:20	2010-12-3	Show	GitHub Exploit DB Packet Storm

300123	-		awstats	awstats	awstats.cgi in AWStats before 7.0 accepts a configdir parameter in the URL, which allows remote attackers to execute arbitrary commands via a crafted configuration file located on a (1) WebDAV server…	CWE-94 Code Injection	CVE-2010-4367	2024-11-21 10:20	2010-12-3	Show	GitHub Exploit DB Packet Storm

300124	-		phpmyadmin	phpmyadmin	Cross-site scripting (XSS) vulnerability in the PMA_linkOrButton function in libraries/common.lib.php in the database (db) search script in phpMyAdmin 2.11.x before 2.11.11.1 and 3.x before 3.3.8.1 a…	CWE-79 Cross-site Scripting	CVE-2010-4329	2024-11-21 10:20	2010-12-3	Show	GitHub Exploit DB Packet Storm

300125	-		mit	kerberos_5	The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to imp…	CWE-264 CWE-16 Permissions, Privileges, and Access Controls Configuration	CVE-2010-4021	2024-11-21 10:20	2010-12-3	Show	GitHub Exploit DB Packet Storm

300126	6.3	MEDIUM Network	mit	kerberos_5	MIT Kerberos 5 (aka krb5) 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a (1) AD-SIGNEDPATH or (2) AD-KDC-ISSUED signature, a…	CWE-310 Cryptographic Issues	CVE-2010-4020	2024-11-21 10:20	2010-12-3	Show	GitHub Exploit DB Packet Storm

300127	-		abk-soft	chameleon_social_networking	Multiple cross-site scripting (XSS) vulnerabilities in forum_new_topic.php in Chameleon Social Networking allow remote attackers to inject arbitrary web script or HTML via the (1) thread_title and (2…	CWE-79 Cross-site Scripting	CVE-2010-4366	2024-11-21 10:20	2010-12-2	Show	GitHub Exploit DB Packet Storm

300128	-		harmistechnology	com_jeajaxeventcalendar	SQL injection vulnerability in JE Ajax Event Calendar (com_jeajaxeventcalendar) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event_id parameter in an alleve…	CWE-89 SQL Injection	CVE-2010-4365	2024-11-21 10:20	2010-12-2	Show	GitHub Exploit DB Packet Storm

300129	-		dadabik	dadabik	DaDaBIK 4.3 beta3, when running in a case-sensitive environment, does not include the htmLawed library, which allows remote attackers to bypass the protection mechanism for CVE-2010-4355 and conduct …	CWE-79 Cross-site Scripting	CVE-2010-4364	2024-11-21 10:20	2010-12-2	Show	GitHub Exploit DB Packet Storm

300130	-		mrcgiguy	freeticket	Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id an…	CWE-89 SQL Injection	CVE-2010-4363	2024-11-21 10:20	2010-12-2	Show	GitHub Exploit DB Packet Storm