Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 4, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252331 4.3 警告 アップル - Apple Safari の WebKit におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-0544 2010-12-10 14:24 2010-06-10 Show GitHub Exploit DB Packet Storm
252332 4.3 警告 アップル - Apple Safari の WebKit における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0051 2010-12-10 14:23 2010-03-15 Show GitHub Exploit DB Packet Storm
252333 9.3 危険 アップル - Apple Safari における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1806 2010-12-10 14:22 2010-09-7 Show GitHub Exploit DB Packet Storm
252334 9.3 危険 アップル - Apple Safari の WebKit におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1789 2010-12-10 14:22 2010-07-30 Show GitHub Exploit DB Packet Storm
252335 1.2 注意 アップル - Apple Safari の「Safari をリセット」における保存されているウェブサイトパスワードを読まれる脆弱性 CWE-362
競合状態 		CVE-2009-1707 2010-12-10 14:21 2009-06-8 Show GitHub Exploit DB Packet Storm
252336 4 警告 アップル - Apple Mac OS X の Dovecot における電子メールを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2010-4011 2010-12-9 14:50 2010-11-17 Show GitHub Exploit DB Packet Storm
252337 7.8 危険 富士通 - Interstage Application Server における情報漏えいの脆弱性 CWE-200
情報漏えい 		- 2010-12-9 14:43 2010-11-15 Show GitHub Exploit DB Packet Storm
252338 6.8 警告 アップル - Apple Mac OS X の Apple Type Services における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2010-4010 2010-12-9 14:37 2010-11-16 Show GitHub Exploit DB Packet Storm
252339 5 警告 IBM - IBM WebSphere Application Server の Web Services Security コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2010-0786 2010-12-9 14:34 2010-11-9 Show GitHub Exploit DB Packet Storm
252340 4.3 警告 IBM - IBM WebSphere Application Server の Integrated Solution コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-4220 2010-12-9 14:30 2010-11-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283201 - google
trimble 		sketchup Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-7388 2024-11-21 11:00 2014-07-2 Show GitHub Exploit DB Packet Storm
283202 - vinay_sajip python-gnupg python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors. NVD-CWE-Other
CVE-2013-7323 2024-11-21 11:00 2014-06-10 Show GitHub Exploit DB Packet Storm
283203 - dleviet datalife_engine Session fixation vulnerability in DataLife Engine (DLE) 9.7 and earlier allows remote attackers to hijack web sessions via the PHPSESSID cookie. NVD-CWE-Other
CVE-2013-7387 2024-11-21 11:00 2014-06-3 Show GitHub Exploit DB Packet Storm
283204 - rom_walton boinc Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a denial of service (crash) or possibly ex… CWE-134
Use of Externally-Controlled Format String 		CVE-2013-7386 2024-11-21 11:00 2014-06-3 Show GitHub Exploit DB Packet Storm
283205 - x2go x2go_server x2gocleansessions in X2Go Server before 4.0.0.8 and 4.0.1.x before 4.0.1.10 allows remote authenticated users to gain privileges via unspecified vectors, possibly related to backticks. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-7383 2024-11-21 11:00 2014-05-20 Show GitHub Exploit DB Packet Storm
283206 - cisco nx-os Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217. CWE-22
Path Traversal 		CVE-2013-6975 2024-11-21 11:00 2014-05-20 Show GitHub Exploit DB Packet Storm
283207 - livezilla livezilla LiveZilla 5.1.2.1 and earlier includes the MD5 hash of the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which allows remote attackers to obtain sensitive… CWE-310
Cryptographic Issues 		CVE-2013-7385 2024-11-21 11:00 2014-05-19 Show GitHub Exploit DB Packet Storm
283208 - unrealircd unrealircd UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors, related to SSL. NOTE: this issue was SPLIT from C… NVD-CWE-Other
CVE-2013-7384 2024-11-21 11:00 2014-05-19 Show GitHub Exploit DB Packet Storm
283209 - apple
python 		mac_os_x
python 		Python 2.7 before 3.4 only uses the last eight bits of the prefix to randomize hash values, which causes it to compute hash values without restricting the ability to trigger hash collisions predictab… CWE-310
Cryptographic Issues 		CVE-2013-7040 2024-11-21 11:00 2014-05-19 Show GitHub Exploit DB Packet Storm
283210 - livezilla livezilla LiveZilla before 5.1.2.1 includes the operator password in plaintext in Javascript code that is generated by lz/mobile/chat.php, which might allow remote attackers to obtain sensitive information and… CWE-310
Cryptographic Issues 		CVE-2013-7033 2024-11-21 11:00 2014-05-19 Show GitHub Exploit DB Packet Storm