Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 5, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252341	9.3	危険	アップル	-	iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-1813	2010-12-8 15:52	2010-09-8	Show	GitHub Exploit DB Packet Storm

252342	4.3	警告	IBM	-	IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-0784	2010-12-8 15:31	2010-11-9	Show	GitHub Exploit DB Packet Storm

252343	6.8	警告	シックス・アパート株式会社	-	Movable Type における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3922	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

252344	4.3	警告	シックス・アパート株式会社	-	Movable Type におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3921	2010-12-8 14:02	2010-12-8	Show	GitHub Exploit DB Packet Storm

252345	2.1	注意	セイコーエプソン株式会社	-	EPSON 製プリンタドライバのインストーラがアクセス権を変更する脆弱性	CWE-DesignError	CVE-2010-3920	2010-12-8 14:01	2010-12-8	Show	GitHub Exploit DB Packet Storm

252346	10	危険	アドビシステムズ	-	Adobe Flash Media Server における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-3635	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252347	5	警告	アドビシステムズ	-	Adobe Flash Media Server のエッジプロセスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2010-3634	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252348	5	警告	アドビシステムズ	-	Adobe Flash Media Server におけるメモリリークの脆弱性	CWE-399 リソース管理の問題	CVE-2010-3633	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252349	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway の Signurl.asp におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-3936	2010-12-7 16:45	2010-11-9	Show	GitHub Exploit DB Packet Storm

252350	4.3	警告	マイクロソフト	-	Microsoft Forefront Unified Access Gateway のモバイルポータルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-2734	2010-12-7 16:44	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 5, 2026, 4:51 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
256231	6.5	MEDIUM Network	libav ffmpeg google	libav ffmpeg chrome	In line libavcodec/h264dec.c:500 in libav(v13_dev0), ffmpeg(n3.4), chromium(56 prior Feb 13, 2017), the return value of init_get_bits is ignored and get_ue_golomb(&gb) is called on an uninitialized g…	CWE-476 NULL Pointer Dereference	CVE-2017-1000460	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256232	6.5	MEDIUM Network	plone	plone	Accessing private content via str.format in through-the-web templates and scripts in Plone 2.5-5.1rc1. This improves an earlier hotfix. Since the format method was introduced in Python 2.6, this part…	NVD-CWE-noinfo	CVE-2017-1000483	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256233	5.4	MEDIUM Network	plone	plone	A member of the Plone 2.5-5.1rc1 site could set javascript in the home_page property of his profile, and have this executed when a visitor click the home page link on the author page.	CWE-79 Cross-site Scripting	CVE-2017-1000482	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256234	9.8	CRITICAL Network	smarty	smarty	Smarty 3 before 3.1.32 is vulnerable to a PHP code injection when calling fetch() or display() functions on custom resources that does not sanitize template name.	CWE-94 Code Injection	CVE-2017-1000480	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256235	6.1	MEDIUM Network	plone	plone	When you visit a page where you need to login, Plone 2.5-5.1rc1 sends you to the login form with a 'came_from' parameter set to the previous url. After you login, you get redirected to the page you t…	CWE-601 Open Redirect	CVE-2017-1000481	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256236	8.8	HIGH Network	opnsense_project netgate	opnsense pfsense	pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged execution of arbitrary code, because the error detection occurs before an X-Fram…	CWE-352 Origin Validation Error	CVE-2017-1000479	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256237	5.4	MEDIUM Network	elabftw	elabftw	ELabftw version 1.7.8 is vulnerable to stored cross-site scripting in the experiment infos component resulting in arbitrary execution of JavaScript and denial of service.	CWE-79 Cross-site Scripting	CVE-2017-1000478	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256238	7.5	HIGH Network	xmlbundle_project	xmlbundle	XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.	CWE-611 XXE	CVE-2017-1000477	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256239	6.5	MEDIUM Network	imagemagick debian canonical	imagemagick debian_linux ubuntu_linux	ImageMagick 7.0.7-12 Q16, a CPU exhaustion vulnerability was found in the function ReadDDSInfo in coders/dds.c, which allows attackers to cause a denial of service.	CWE-400 Uncontrolled Resource Consumption	CVE-2017-1000476	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm

256240	6.5	MEDIUM Network	mautic acquia	mautic	Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user…	CWE-22 Path Traversal	CVE-2017-1000490	2024-11-21 12:04	2018-01-4	Show	GitHub Exploit DB Packet Storm