Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 3, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252271	6.4	警告	アップル日本電気 Fetchmail Project	-	fetchmail における任意の SSL サーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2009-2666	2010-12-15 15:25	2009-08-6	Show	GitHub Exploit DB Packet Storm

252272	4.3	警告	アップル	-	Apple Safari の WebKit におけるロケーションバーの URL を偽装される脆弱性	CWE-Other その他	CVE-2010-3810	2010-12-15 14:42	2010-11-22	Show	GitHub Exploit DB Packet Storm

252273	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3809	2010-12-15 14:39	2010-11-22	Show	GitHub Exploit DB Packet Storm

252274	9.3	危険	アップル	-	Apple Safari の WebKit における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3808	2010-12-15 14:37	2010-11-22	Show	GitHub Exploit DB Packet Storm

252275	9.3	危険	アップル	-	Apple Safari の WebKit 内にある JavaScript 実装における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3805	2010-12-15 14:32	2010-11-22	Show	GitHub Exploit DB Packet Storm

252276	5	警告	アップル	-	Apple Safari の WebKit 内にある JavaScript 実装におけるユーザを追跡可能な脆弱性	CWE-310 暗号の問題	CVE-2010-3804	2010-12-15 14:29	2010-11-22	Show	GitHub Exploit DB Packet Storm

252277	9.3	危険	アップル	-	Apple Safari の WebKit における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2010-3803	2010-12-15 14:25	2010-11-22	Show	GitHub Exploit DB Packet Storm

252278	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3348	2010-12-15 14:08	2010-12-15	Show	GitHub Exploit DB Packet Storm

252279	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:07	2010-12-15	Show	GitHub Exploit DB Packet Storm

252280	2.6	注意	マイクロソフト	-	Internet Explorer におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3342	2010-12-15 14:05	2010-12-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 3, 2026, 4:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295171	-	parallels	parallels_plesk_panel	The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture…	CWE-200 Information Exposure	CVE-2011-4728	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

295172	-	parallels	parallels_plesk_panel	The Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 does not properly validate string data that is intended for storage in an XML document, which allows remote attacker…	CWE-20 Improper Input Validation	CVE-2011-4727	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

295173	-	parallels	parallels_plesk_panel	Multiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2011-4726	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

295174	-	parallels	parallels_plesk_panel	Multiple SQL injection vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to execute arbitrary SQL commands via crafted input…	CWE-89 SQL Injection	CVE-2011-4725	2024-11-21 10:32	2011-12-16	Show	GitHub Exploit DB Packet Storm

295175	-	artsoft	rocks\'n\'diamonds	Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2011-4606	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

295176	-	digium	asterisk	The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of…	CWE-200 Information Exposure	CVE-2011-4598	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

295177	-	digium	asterisk	The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid requests depending on…	CWE-200 Information Exposure	CVE-2011-4597	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

295178	-	jasper_project suse fedoraproject canonical debian oracle redhat	jasper linux_enterprise_server fedora ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_software_development_kit outside_in_technology enterprise_linux_deskt…	The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer o…	CWE-787 Out-of-bounds Write	CVE-2011-4517	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

295179	-	jasper_project suse fedoraproject canonical debian oracle	jasper linux_enterprise_server fedora ubuntu_linux linux_enterprise_desktop debian_linux linux_enterprise_software_development_kit outside_in_technology	Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corr…	CWE-787 Out-of-bounds Write	CVE-2011-4516	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

295180	-	ipmitool_project	ipmitool	ipmievd (aka the IPMI event daemon) in OpenIPMI, as used in the ipmitool package 1.8.11 in Red Hat Enterprise Linux (RHEL) 6, Debian GNU/Linux, Fedora 16, and other products uses 0666 permissions for…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2011-4339	2024-11-21 10:32	2011-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed